Beveiligingsadvies

CVE-2026-11887

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-01 06:00:02

Laatst bijgewerkt 2026-07-01 10:16:01

Toegewezen door WPScan

CVSS-score 4.3

Status PUBLISHED

Beschrijving

The Salon Booking System WordPress plugin before 10.30.20 does not have proper authorisation checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to modify a Salon Booking System WordPress plugin before 10.30.20 setting and bypass the manual approval of new bookings.

← Alle CVE's bekijken Bekijk op cve.org ↗