CVE-2026-25374 | raratheme Spa and Salon Plugin up to 1.3.2 on WordPress authorization

A vulnerability was found in raratheme Spa and Salon Plugin up to 1.3.2 on WordPress. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to missing authorization.

This vulnerability is uniquely identified as CVE-2026-25374. The attack is possible to be carried out remotely. No exploit exists.