[ CVE-2026-110034 · Published 19 Oct 2026 ]
Vulnerability in Unknown Salon Booking System
CVSS 3.7
EPSS <1%No fix listed yet
[ Description ]Official description
The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a confirmed booking stored with a negative total.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.