CVE WATCH / VULNERABILITY DETAIL
CVE-2026-110032
MEDIUMCVSS 5.5NVD feed
Published 18 October 2026 · tracked since 18 October 2026
Description
The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles may edit through the customers management screen, allowing users with the Salon Staff or Salon Worker role to reset any other user's role, including administrators, to a customer and
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110886 CRITICAL 9.8
- CVE-2026-107436 HIGH 8.8
- CVE-2026-87844 MEDIUM 5.3
- CVE-2026-96534 HIGH 7.7
- CVE-2026-111877 MEDIUM 4.3
- CVE-2026-111942 MEDIUM 4.3
- CVE-2026-110031 HIGH 7.2
- CVE-2026-110033 MEDIUM 6.8
- CVE-2026-110035 MEDIUM 4.3
- CVE-2026-110069 MEDIUM 4.3