Court Reservation WordPress Plugin Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Court Reservation WordPress plugin, affecting versions prior to 1.10.9. The vulnerability arises because the plugin does not implement CSRF protection when deleting events. This lack of protection could enable attackers to exploit a logged-in admin into deleting events without their consent.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of events by manipulating a logged-in admin.

Remediation

Users are advised to update the Court Reservation WordPress plugin to version 1.10.9 or later.