CVE-2026-11887

The Salon Booking System WordPress plugin (versions prior to 10.30.20 ) is vulnerable to an authorization bypass due to insufficient checks on one of its AJAX actions . This flaw allows any authenticated user , such as a subscriber, to modify plugin settings and bypass manual approval for new boo...