Is CVE-2026-110034 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110034?

CVE-2026-110034 has a CVSS v3 severity of LOW (3.7).

Back

CVE-2026-110034

Description

The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenticated visitor who knows a valid discount code to create a confirmed booking stored with a negative total.