Salon Booking System WordPress Plugin Missing Authorization Vulnerability in AJAX Actions

A vulnerability exists in the Salon Booking System WordPress plugin, specifically in versions through 10.20, due to a lack of proper capability checks on AJAX functions. This flaw allows unauthenticated attackers to execute AJAX actions, potentially leading to unauthorized data modification and limited file uploads.

Impact

Exploitation of this vulnerability could result in unauthorized execution of AJAX actions, allowing for data manipulation and restricted file uploads.

Reproduction

The vulnerability can be reproduced by sending an AJAX request to the WordPress site with the 'method' parameter specifying the desired action. Since the plugin does not properly validate the request's authorization, this can be done by an unauthenticated user.

Remediation

No known patch is available. It is recommended to review the vulnerability details and consider uninstalling the affected plugin.