CVE-2025-31560: WordPress Salon booking system plugin < 10.15 - Privilege Escalation vulner

WordPress Salon booking system plugin < 10.15 - Privilege Escalation vulnerability

Status

Published

2025-04-01

Updated

2026-04-28

Assigning organization

Patchstack

Description

Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Privilege Escalation.This issue affects Salon booking system: from n/a through < 10.15.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dimitri Grassi Salon booking system

Default version status: unaffected

0 to ≤ 10.15affected

References

https://patchstack.com/database/Wordpress/Plugin/salon-booking-system/vulnerability/wordpress-salon-booking-system-plugin-10-11-privilege-escalation-vulnerability?_s_id=cve ↗