CVE-2026-81793— WordPress Salon booking system plugin <= 10.31.5 - Broken Access Control vulnerability
Quick assessment
Affected
Dimitri Grassi Salon booking system
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
未经身份验证的访问控制失效：Salon 预约系统版本 10.31.5 及之前版本中存在未经验证的访问控制（Broken Access Control）漏洞。
Possible ATT&CK Techniques 1 AI
T1079
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-81793
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress Salon booking system plugin <= 10.31.5 - Broken Access Control vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Unauthenticated Broken Access Control in Salon booking system <= 10.31.5 versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dimitri Grassi | Salon booking system | n/a ~ 10.31.5 | - |
|
II. Public POCs for CVE-2026-81793
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-81793
请登录查看更多情报信息。
News Coverage for CVE-2026-81793 (1)
IV. Related Vulnerabilities
Same product: Salon booking system
-
CVE-2026-66453
WordPress Salon booking system plugin <= 10.30.26 - Broken A -
CVE-2026-17020
Salon Booking System – Free Version <= 10.31.0 - Subscriber+ -
CVE-2026-17023
Salon Booking System – Free Version <= 10.30.33 - Unauthenti -
CVE-2026-17022
Salon Booking System – Free Version < 10.30.34 - Unauthentic -
CVE-2026-17021
Salon Booking System – Free Version < 10.30.34 - Unauthentic
Same vendor: Dimitri Grassi
-
CVE-2026-66453
WordPress Salon booking system plugin <= 10.30.26 - Broken A -
CVE-2026-40768
WordPress Salon booking system plugin <= 10.30.24 - Insecure -
CVE-2026-42666
WordPress Salon booking system plugin <= 10.30.25 - Broken A -
CVE-2025-67954
WordPress Salon booking system plugin <= 10.30.3 - Sensitive -
CVE-2025-66531
WordPress Salon booking system plugin <= 10.30.3 - Cross Sit
Same weakness: CWE-862
-
CVE-2026-88959
Anchor CMS through 0.12.7 Privilege Escalation via Missing A -
CVE-2026-4129
Improper Access Controls in NI SystemLink -
CVE-2026-88898
AppFlowy-Cloud 0.7.2 through 0.9.64 Missing Workspace Author -
CVE-2026-84821
WordPress WP Fast Total Search plugin <= 1.82.284 - Broken A -
CVE-2026-81801
WordPress WP-Stateless plugin <= 4.4.1 - Settings Change vul
V. Comments for CVE-2026-81793
No comments yet