EUVD-2026-57873
GHSA-w4wg-6w3x-96hc
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated network endpoint with no user interaction justifies AV:N/AC:L/PR:N/UI:N; broken-auth data access supports C:H/I:H, but the Information Disclosure tag gives no clear availability impact, so A:N.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionCVE.org
Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.
AnalysisAI
Authentication bypass in the Salon Booking System WordPress plugin (versions 10.30.26 and earlier) allows remote unauthenticated attackers to defeat the plugin's identity/verification logic (CWE-288) and gain access to protected functionality or data without valid credentials. The CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N) reflects network-reachable, low-complexity exploitation with high confidentiality, integrity, and availability impact; Patchstack tags it as Information Disclosure. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires only network reachability to a WordPress site running the Salon Booking System plugin at version 10.30.26 or earlier, with the plugin's vulnerable endpoint active (the default state once the plugin is installed and booking is enabled). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are largely aligned toward high priority in principle but incomplete in practice. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A remote attacker with no account sends a crafted HTTP request directly to a Salon Booking System endpoint that fails to properly verify identity, causing the plugin to treat the request as an authorized user and return or modify booking/customer data. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, this requires only network access to the WordPress site with no authentication and no victim interaction. … |
| Remediation | No vendor-released patch version is identified in the available data; the input only confirms that versions up to and including 10.30.26 are affected, so administrators should upgrade to the latest Salon Booking System release available on WordPress.org that is newer than 10.30.26 and confirm it addresses this issue via the Patchstack advisory (https://patchstack.com/database/wordpress/plugin/salon-booking-system/vulnerability/wordpress-salon-booking-system-plugin-10-30-26-broken-authentication-vulnerability). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: conduct a complete audit of all WordPress installations to identify any running Salon Booking System plugin version 10.30.26 or earlier; immediately disable and deactivate the plugin if it is not actively required for business operations. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Salon Booking System
View allThe Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and includ
The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validatio
Unauthenticated booking record disclosure in the Salon Booking System WordPress plugin (through version 10.30.33) expose
The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its end
The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could a
Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.5. Rated crit
The Salon booking system WordPress plugin before 6.3.1 does not properly sanitise and escape the First Name field when b
The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field wh
Unauthenticated price manipulation in the Salon Booking System WordPress plugin (through 10.30.33) allows any remote vis
The Salon booking system Free and pro WordPress plugins before 7.6.3 do not have proper authorisation when searching boo
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System Sal
OAuth token hijacking in the Salon Booking System WordPress plugin (through 10.30.33) allows unauthenticated remote atta
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today