CVE-2026-110015 - Salon Booking System < 10.31.9 - Administrator Account Creation via CSRF
CVE ID :CVE-2026-110015 Published : Oct. 16, 2026, 7:17 a.m. | 8 hours, 17 minutes ago Description :The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated...