CVE-2026-17020 | Salon Booking System Plugin up to 10.30.33 on WordPress REST API endpoint authorization

August 10, 2026 Yanac

A vulnerability was found in Salon Booking System Plugin up to 10.30.33 on WordPress. It has been declared as problematic. The affected element is an unknown function of the component REST API endpoint. Executing a manipulation can lead to authorization bypass.

This vulnerability is handled as CVE-2026-17020. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More