Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 06:59:05 +0000 CVE-2026-110031 — Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Me… https://db.gcve.eu/vuln/cve-2026-110031 <p><strong>Affected:</strong> Unknown Salon Booking System</p> <p>The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when editing a customer, allowing them to escalate any account to administrator and take over the site.</p> <p><strong>Affected:</strong> Unknown Salon Booking System</p> <p>The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when editing a customer, allowing them to escalate any account to administrator and take over the site.</p> https://db.gcve.eu/vuln/cve-2026-110031