Unauthenticated Broken Authentication in Salon Booking System by Salon Booking
CVE-2026-66453

9.8CRITICAL

Key Information:

Vendor

WordPress
Status
Salon Booking System
Vendor
CVE Published:
13 August 2026

What is CVE-2026-66453?

The Salon Booking System versions up to 10.30.26 are susceptible to an unauthenticated broken authentication vulnerability. This flaw allows attackers to exploit the system, potentially gaining unauthorized access and control over user accounts. It is crucial for users to patch and update their systems to mitigate this risk.

Affected Version(s)

Salon booking system <= 10.30.26

References

https://patchstack.com/database/wordpress/plugin/salon-bo...
vdb-entry

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Evan NR | Patchstack Bug Bounty Program
.