The WordPress plugin called “Salon booking system” has a security issue that allows anyone to delete important files from the website, even if they are not logged in. This could lead to a takeover of the site and allow attackers to run their own code.