CVE-2026-110031

The Salon Booking System WordPress plugin (versions 10.17 - 10.31.10 ) is vulnerable to privilege escalation . Users with the custom salon staff role can assign arbitrary capabilities to other accounts by editing a customer profile. This occurs because the plugin fails to prevent the modification...