CVE-2026-39601

A race condition vulnerability in the Booking Calendar plugin allows attackers to exploit improper synchronization when accessing shared resources, potentially leading to unexpected behavior or data corruption. Although the severity is rated low, organizations using versions up to 11.8.4 should prioritize patching this issue to mitigate risks associated with concurrent execution flaws. Users of the affected plugin should assess their exposure and implement updates to ensure system integrity.