CVE-2026-110031

The Salon Booking System WordPress plugin versions 10.17 through 10.31.10 is vulnerable to a privilege escalation flaw. Users with the custom salon staff role can assign arbitrary capabilities to other accounts while editing a customer. This vulnerability, caused by a case-insensitive user meta k...