CVE-2026-81793: WordPress Salon booking system plugin <= 10.31.5 - Broken Access Control vulnerability

Q: Who can exploit this issue?

The issue is exploitable without authentication. An attacker can attempt exploitation remotely over the network and does not need user interaction.

Q: What impact is indicated by the available severity data?

The CVSS vector indicates low impact to integrity and availability, with no confidentiality impact. The issue is rated medium severity with a score of 6.5.

Q: Which plugin versions are affected?

Salon booking system plugin versions up to and including 10.31.5 are identified as affected.

Published Sep 10, 2026

Updated

Unauthenticated Broken Access Control in Salon booking system <= 10.31.5 versions.

Affected Software

1 affected component

WordPress Salon Booking System plugin<=10.31.5

Event History

Sep 10, 2026

CVE Published

via MITRE·02:23 PM

Data Sourced

via MITRE·02:23 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is exploitable without authentication. An attacker can attempt exploitation remotely over the network and does not need user interaction.

What impact is indicated by the available severity data?

The CVSS vector indicates low impact to integrity and availability, with no confidentiality impact. The issue is rated medium severity with a score of 6.5.

Which plugin versions are affected?