Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.2
CVE-2026-110031: Salon Booking System plugin lets staff become administrators
CVE-2026-110031 · published 17 days ago
Summary
The Salon Booking System add‑on for WordPress lets a user with the staff role change any other account into an administrator when editing a customer. This means a staff member could take full control of the entire website. Update the plugin to version 10.31.11 or later, or remove staff permissions until the fix is applied.
What to do
- Update unknown salon booking system to version 10.31.11 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| unknown | salon booking system | < 10.31.11 |
Original advisory text
Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key
The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when editing a customer, allowing them to escalate any account to administrator and take over the site.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
7.2
High
Type
CWE-269Improper Privilege Management
Timeline
Published18 Oct 2026
Updated4 Nov 2026
First seen18 Oct 2026
Track software like this
Free during beta