Privilege Escalation in Salon Booking System Pro by WordPress Chef
CVE-2026-25334

8.1HIGH

Key Information:

Vendor

WordPress
Status
Salon Booking System Pro
Vendor
CVE Published:
25 March 2026

What is CVE-2026-25334?

The Salon Booking System Pro plugin by WordPress Chef is susceptible to an incorrect privilege assignment vulnerability that could allow unauthorized users to escalate their privileges. This issue compromises the integrity and security of the application, making it critical for users to update to version 10.30.12 or later to mitigate potential exploitation.

Affected Version(s)

Salon Booking System Pro 0 <= 10.30.12

References

https://patchstack.com/database/Wordpress/Plugin/salon-bo...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phat RiO | Patchstack Bug Bounty Program
.