What is GHSA-jqvh-5w26-v59x?

GHSA-jqvh-5w26-v59x is a security advisory published by GitHub Security Advisories with Medium severity. The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its...

Which CVE IDs does GHSA-jqvh-5w26-v59x cover?

GHSA-jqvh-5w26-v59x covers the following CVE IDs: CVE-2026-110012. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jqvh-5w26-v59x?

GHSA-jqvh-5w26-v59x has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-jqvh-5w26-v59xMediumCVSS 4.3

The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its...

Vendor

GitHub Security Advisories

Published

October 16, 2026

Last Modified

October 16, 2026

🔗 CVE IDs covered (1)

CVE-2026-110012 →

📋 Description

The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authenticated user such as a subscriber to read every customer's booking records, including their personal data.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-110012
https://wpscan.com/vulnerability/7253eae4-4759-4388-8120-500b9d7352c4
https://github.com/advisories/GHSA-jqvh-5w26-v59x