CVE-2026-110014

The Salon Booking System WordPress plugin (versions prior to 10.31.9 ) is vulnerable to an authentication bypass flaw. The software fails to perform proper authorization checks when creating bookings and trusts caller-supplied user identifiers and booking statuses. This allows unauthenticated att...