Vulnerability in Salon Booking System
CVE-2026-17020
The Salon Booking System WordPress plugin through 10.30.33 does not verify that a requested booking belongs to the caller on one of its REST API endpoints, requiring only a basic read capability, allowing any authenticated user (including…
Affected products
- Unknown Salon Booking System — versions 0
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)