PT-2026-27901 · Unknown · Salon Booking System

Published 2026-03-25 · Updated 2026-03-30 · CVE-2026-25334

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Salon Booking System Pro versions prior to 10.30.12

Description An Incorrect Privilege Assignment issue exists in Salon Booking System Pro. This allows for privilege escalation.

Recommendations Update Salon Booking System Pro to version 10.30.12 or later.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-25334

Affected Products

Salon Booking System

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-25334 · Security Note
• https://twitter.com/CVEnew/status/2038517018157326678 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/salon-booking-plugin-pro/vulnerability/wordpress-salon-booking-system-pro-plugin-10-30-12-account-takeover-vulnerability?_s_id=cve · Note