CVE-2025-8492

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The Salon Booking System, Appointment Scheduling for Salons, Spas & Small Businesses plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax function in all versions up to, and including, 10.22. This makes it possible for unauthenticated attackers to execute AJAX actions, including limited file uploads.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Sep 11, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-84939.8A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknowCVE-2025-84949.8A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affecCVE-2025-84959.8A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknowCVE-2025-84969.8A vulnerability has been found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this vulnerability is anCVE-2025-84979.8A weakness has been identified in code-projects Online Medicine Guide 1.0. This affects an unknown part of the file /cusfindphar2.php. This CVE-2025-84989.8A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /CVE-2025-84999.8A vulnerability was found in code-projects Online Medicine Guide 1.0. It has been declared as critical. This vulnerability affects unknown cCVE-2025-85008.8A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This issue affects some unknCVE-2025-85015.4A vulnerability classified as problematic has been found in code-projects Human Resource Integrated System 1.0. Affected is an unknown functCVE-2025-85029.8A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerability is an unknown fuCVE-2025-85039.8A vulnerability, which was classified as critical, has been found in code-projects Online Medicine Guide 1.0. Affected by this issue is someCVE-2025-85049.8A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file
CVE-2025-8492: Medium severity, CVSS 5.3 | Vulnix