CVE-2026-110034

The Salon Booking System WordPress plugin (versions prior to 10.31.11 ) is vulnerable to an unauthenticated negative booking total flaw. The root cause is a failure to enforce a minimum value of zero when subtracting a fixed-amount discount from a booking's total. An unauthenticated visitor posse...

CVE-2026-110034 Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code

The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a confirmed booking stored with a negative total...