4.8
Medium
CVE-2026-110013 The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a…
Description
The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress plugin before 10.31.9 and the second at which a token was issued. An attacker able to constrain when a staff or administrator token was issued can compute a valid token and access the booking API as that user, including an administrator.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Salon booking system 10.31 | earliest → < 10.31.9 | 10.31.9 |
References
- wpscan.com wpscan.com
Timeline
- Published
- Last modified
Other CVEs of Salon booking system
The 21 CVEs of Salon booking system →
CVE-2026-110034
The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a…
3.7
Low
CVE-2026-110033
The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching…
6.8
Medium
CVE-2026-110032
The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles…
5.5
Medium
CVE-2026-110035
The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon…
4.3
Medium