Skip to main content

Salon Booking System CVE-2026-17021

| EUVDEUVD-2026-55006 MEDIUM
Missing Authorization (CWE-862)
2026-08-10 WPScan GHSA-jf35-5rcj-7rqm
Authentication Bypass WordPress Salon Booking System
5.3
CVSS 3.1 · Vendor: WPScan
Share

Severity by source

Vendor (WPScan) PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
vuln.today AI
5.3 MEDIUM

Network-accessible AJAX endpoint requires no authentication or interaction; impact is integrity-only, limited to booking total modification with no confidentiality or availability effect.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (WPScan).

CVSS VectorVendor: WPScan

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

4
Analysis Generated
Aug 11, 2026 - 23:47 vuln.today
CVSS changed
Aug 11, 2026 - 21:22 NVD
5.3 (MEDIUM)
CVE Published
Aug 10, 2026 - 06:00 cve.org
UNKNOWN (no severity yet)
CVE Published
Aug 10, 2026 - 06:00 cve.org
MEDIUM 5.3

DescriptionCVE.org

The Salon Booking System WordPress plugin through 10.30.33 does not properly restrict access to some of its booking-modification AJAX actions and does not verify ownership of the targeted booking, allowing unauthenticated users to tamper with the stored total of arbitrary bookings.

AnalysisAI

Unauthenticated price manipulation in the Salon Booking System WordPress plugin (through 10.30.33) allows any remote visitor to tamper with the stored total of arbitrary bookings by invoking unprotected booking-modification AJAX endpoints. The plugin neither restricts access to these actions nor verifies that the requesting user owns the targeted booking, creating a CWE-862 missing-authorization flaw. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Identify WordPress site running Salon Booking System
Delivery
Enumerate or obtain a target booking ID
Exploit
Craft unauthenticated AJAX POST to admin-ajax.php
Execution
Invoke unprotected booking-modification action
Persist
Submit attacker-controlled total value
Impact
Booking record updated with falsified amount
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No authentication is required - the CVSS vector PR:N confirms unauthenticated access. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 3.1 base score of 5.3 (Medium) reflects the network-accessible, unauthenticated, zero-interaction nature of the flaw (AV:N/AC:L/PR:N/UI:N) but correctly caps impact at I:L given the constrained scope - only booking totals are writable, not arbitrary data or system files. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker visits a WordPress salon booking site, identifies a target booking ID through enumeration or prior knowledge (e.g., from a legitimate booking confirmation), and sends a crafted unauthenticated AJAX POST request to wp-admin/admin-ajax.php specifying the target booking and a modified total amount. A publicly available PoC from WPScan details the exact action name and parameters. …
Remediation The primary remediation is to update the Salon Booking System plugin beyond version 10.30.33; however, no specific patched release version is independently confirmed from the available data - consult the WPScan advisory at https://wpscan.com/vulnerability/fbbfa907-3efd-4050-9651-d3836af062a9/ and the WordPress plugin repository for the latest release. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Salon Booking System

View all
CVE-2024-4442 CRITICAL
9.1 May 21

The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and includ
CVE-2024-3229 CRITICAL
9.8 Jun 19

The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validatio
CVE-2026-17022 HIGH POC
7.5 Aug 10

Unauthenticated booking record disclosure in the Salon Booking System WordPress plugin (through version 10.30.33) expose
CVE-2022-0920 HIGH POC
7.5 Apr 11

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its end
CVE-2024-2603 MEDIUM POC
6.3 Apr 26

The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could a
CVE-2024-30510 CRITICAL
10.0 Mar 29

Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.5. Rated crit
CVE-2021-24429 MEDIUM POC
6.1 Jul 12

The Salon booking system WordPress plugin before 6.3.1 does not properly sanitise and escape the First Name field when b
CVE-2026-66453 CRITICAL
9.8 Aug 13

Authentication bypass in the Salon Booking System WordPress plugin (versions 10.30.26 and earlier) allows remote unauthe
CVE-2024-2101 MEDIUM POC
5.7 Apr 17

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field wh
CVE-2022-0919 MEDIUM POC
5.3 Apr 11

The Salon booking system Free and pro WordPress plugins before 7.6.3 do not have proper authorisation when searching boo
CVE-2024-37231 CRITICAL
9.1 Jun 24

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System Sal
CVE-2026-17023 MEDIUM POC
4.8 Aug 10

OAuth token hijacking in the Salon Booking System WordPress plugin (through 10.30.33) allows unauthenticated remote atta

Same weakness CWE-862 – Missing Authorization

View all
CVE-2023-52163 HIGH POC
8.8
CVE-2025-6205 CRITICAL POC
9.1
CVE-2025-20362 HIGH POC
8.6
CVE-2017-9232 CRITICAL POC
9.8
CVE-2023-6875 CRITICAL POC
9.8
CVE-2024-4898 CRITICAL POC
9.8
CVE-2023-32117 CRITICAL POC
9.8
CVE-2020-36719 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-17021 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy