PT-2026-54500
CVE-2026-11887
·
Published
2026-07-01
·
Updated
2026-08-10
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Salon Booking System WordPress plugin versions prior to 10.30.20
Description
Insufficient authorization checks on an AJAX action allow any authenticated user, including those with subscriber privileges, to modify plugin settings. This flaw enables an attacker to bypass the manual approval process for new bookings.
Recommendations
Update Salon Booking System WordPress plugin to version 10.30.20 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾