Missing Authorization Vulnerability in Salon Booking Pro by WordPress
CVE-2025-32295

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Salon Booking Pro
Vendor
CVE Published:
16 May 2025

What is CVE-2025-32295?

A missing authorization vulnerability in Salon Booking Pro allows attackers to exploit incorrectly configured access control security levels. This weakness permits unauthorized users to gain access to functionalities and data they should not be able to access, potentially leading to severe ramifications for user privacy and data integrity. The issue impacts versions of Salon Booking Pro ranging from n/a to 10.10.2.

Affected Version(s)

Salon Booking Pro <= 10.10.2

References

https://patchstack.com/database/wordpress/plugin/salon-bo...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Anhchangmutrang (Patchstack Alliance)
.
CVE-2025-32295 : Missing Authorization Vulnerability in Salon Booking Pro by WordPress