Vulnerability in Salon Booking System

CVE-2026-11887

The Salon Booking System WordPress plugin before 10.30.20 does not have proper authorisation checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to modify a Salon Booking System WordPress plugin befo…

Affected products

  • Unknown Salon Booking System — versions 0

References