WP Booking Calendar, CVE-2026-39601

CVE, Research URL: CVE-2026-39601
Home page URL: Security reports for WP Booking Calendar
Application: WP Booking Calendar
Published on: Oct 02, 2026
Research Description: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking allows Leveraging Race Conditions.This issue affects Booking Calendar: from n/a through 11.8.4.
Affected versions: max 11.8.4.
Status: vulnerable