WordPress Vulnerability Scanner WPSec
Vulnerabilities / Salon Booking System – Appointment Booking for Salons, Barbershops & Spas

Salon Booking System – Appointment Booking for Salons, Barbershops & Spas vulnerabilities

Advisories WPSec published for Salon Booking System – Appointment Booking for Salons, Barbershops & Spas. Other sources may list more. Its attack surface: Salon Booking System – Appointment Booking for Salons, Barbershops & Spas on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-16 WPSEC-2026-1098 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.10 - Authenticated (Salon Staff+) Server-Side Request Forgery via 'image_url' Parameter Medium 5.5 10.31.11
2026-10-16 WPSEC-2026-1097 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.10 - Authenticated (Salon Staff+) Stored Cross-Site Scripting via SVG Image Upload Medium 5.5 10.31.11
2026-10-16 WPSEC-2026-1096 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.10 - Authenticated (Salon Staff+) Missing Authorization to Administrator Demotion and Arbitrary User Deletion Medium 6.7 10.31.11
2026-10-16 WPSEC-2026-1095 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.10 - Authenticated (Subscriber+) Missing Authorization to Salon Data Read via REST API Medium 4.3 10.31.11
2026-10-16 WPSEC-2026-1094 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.10 - Authenticated (Salon Staff+) Privilege Escalation via Customer User Meta High 7.2 10.31.11
2026-10-16 WPSEC-2026-1093 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.10 - Cross-Site Request Forgery to Arbitrary User Deletion High 8.1 10.31.11
2026-10-13 WPSEC-2026-0854 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.9 - Unauthenticated Sensitive Information Exposure via Publicly Accessible Booking Calendar Files Medium 5.3 10.31.10
2026-10-13 WPSEC-2026-0853 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Fields High 7.2 10.31.10
2026-10-04 WPSEC-2026-0430 Salon booking system <= 10.31.8 - Unauthenticated Sensitive Information Exposure via PWA index.html Access Token Critical 9.8 10.31.9
2026-10-04 WPSEC-2026-0429 Salon booking system <= 10.31.8 - Unauthenticated Authentication Bypass via Predictable Zapier API Key Medium 6.5 10.31.9
2026-10-04 WPSEC-2026-0428 Salon booking system <= 10.31.8 - Unauthenticated Authentication Bypass via Predictable REST API Access Tokens High 8.1 10.31.9
2026-10-01 WPSEC-2026-0162 Salon booking system <= 10.31.6 - Authenticated (Salon Staff+) Stored Cross-Site Scripting via Customer Notes Medium 5.5 10.31.7

License: CC BY 4.0