CVE-2026-11887

CVSS Score & Metrics

Base Score

4.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N                                    

Vulnerability Description

The Salon Booking System WordPress plugin before 10.30.20 does not have proper authorisation checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to modify a Salon Booking System WordPress plugin before 10.30.20 setting and bypass the manual approval of new bookings.

Vulnerability Details

Published Date

July 01, 2026

Last Modified

July 01, 2026

Source

NVD

Vendor

Unknown

Product

Salon Booking System

External References

https://wpscan.com/vulnerability/ed203765-0482-4d55-b36f-cdab11ed3cf0/

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment