CVE-2026-39601

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking allows Leveraging Race Conditions.This issue affects Booking Calendar: from n/a through 11.8.4.

  • Published Oct 2, 2026
  • CVSS 3.7 low
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-39601 at the National Vulnerability Database