CVE-2026-110031 Salon Booking System CVE debrief

Who should care

Defenders responsible for WordPress installations with the Salon Booking System plugin should assess exposure and verify the version of the plugin. They should also restrict the capabilities of users with the custom salon staff role and monitor user activity and account changes.

Why it matters

The Salon Booking System WordPress plugin vulnerability allows users with custom salon staff role to escalate account privileges, potentially leading to administrator role takeover.

• Potential privilege escalation to administrator role
• Possible account takeover by users with custom salon staff role
• Required verification of plugin version and user role capabilities
• Need for monitoring user activity and account changes

Technical summary

The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when editing a customer, allowing them to escalate any account to administrator and take over the site. The vulnerability allows users with custom salon staff role to escalate account privileges, potentially leading to administrator role takeover. Defenders should prioritize verifying the version of the Salon Booking System WordPress plugin and restricting the capabilities of users with the custom salon staff role.

Defensive priority

Defenders should prioritize verifying the version of the Salon Booking System WordPress plugin and restricting the capabilities of users with the custom salon staff role.

Recommended defensive actions

• Verify the version of the Salon Booking System WordPress plugin
• Restrict the capabilities of users with the custom salon staff role
• Monitor user activity and account changes
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine the affected versions and potential impact. The Salon Booking System plugin is used in WordPress installations, and defenders should verify the plugin version and user role capabilities. The vulnerability allows users with custom salon staff role to escalate account privileges.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.