CVE-2026-110031CWE-269privilege-escalation

CVE-2026-110031

High · published October 18, 2026

CVSS v3.1
7.2
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when editing a customer, allowing them to escalate any account to administrator and take over the site.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-10-18T11:16Z
References (1)
https://wpscan.com/vulnerability/8d24ad5b-2d50-467b-9c40-45e86e53dafb/ · [email protected]
EPSS history
Timeline
  • 19 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 18 OCT 06:00Z
    Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key
    cvelistv5
  • 18 OCT 06:00Z
    Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key
    cvelistv5