Privilege Escalation in Salon Booking System WordPress Plugin

Executive Summary

The Salon Booking System WordPress plugin before version 10.31.11 has a privilege escalation vulnerability. Users with the custom 'salon staff' role can assign arbitrary capabilities to other accounts when editing customer profiles. This allows them to escalate any account to administrator level and take full control of the website.

Useful 0 Not Useful 0

Detection Guidance

Check the installed version of the Salon Booking System plugin. If it is between 10.17 and 10.31.10, the system is vulnerable. Use WordPress admin panel or run a command like 'wp plugin list' in the WordPress directory to verify the version.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers with the 'salon staff' role to gain full administrative access to the WordPress site. They can then install malicious plugins, modify site content, steal data, or take complete control of the website.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate GDPR's data protection requirements or HIPAA's safeguards for protected health information if the WordPress site handles such data. Unauthorized administrator access could result in data breaches or improper data handling.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Salon Booking System plugin to version 10.31.11 or later immediately. Remove or restrict the custom 'salon staff' role if not needed. Monitor user accounts for unauthorized privilege changes.

Useful 0 Not Useful 0