CVE-2026-105070: WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability
Published Oct 6, 2026
·Updated
Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions.
Affected Software
1 affected component
Salon Booking System Salon Booking System<=10.31.7
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Salon booking system pluginto a version that resolves this vulnerability.Fixed in 10.31.9
Event History
Oct 6, 2026
CVE Published
via MITRE·08:35 AM
Data Sourced
via MITRE·08:35 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need a WordPress account or existing privileges to exploit this issue?
No existing privileges are required. The CVSS vector indicates that user interaction is required for exploitation.
2
Which plugin versions are affected?
Salon Booking System versions 10.31.7 and earlier are affected.