עברית

Vulnerability Intelligence

CVE-2026-39601

Low 3.7

Published
Last modified
NVD status
Deferred

Description

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking allows Leveraging Race Conditions.This issue affects Booking Calendar: from n/a through 11.8.4.

References1

Metrics

CVSS 3.1
3.7 LOW Score source: CNA CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS — exploit probability
0% percentile: 4 · as of 10 November 2026
CWE
CWE-362

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.