| CVE-2026-110034 |
The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a…
|
3.7
Low
|
Oct 19, 2026 |
| CVE-2026-110035 |
The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon…
|
4.3
Medium
|
Oct 18, 2026 |
| CVE-2026-110031 |
The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role…
|
7.2
High
|
Oct 18, 2026 |
| CVE-2026-110032 |
The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles…
|
5.5
Medium
|
Oct 18, 2026 |
| CVE-2026-110033 |
The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching…
|
6.8
Medium
|
Oct 18, 2026 |
| CVE-2026-110012 |
The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to…
|
4.3
Medium
|
Oct 16, 2026 |
| CVE-2026-110013 |
The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a…
|
4.8
Medium
|
Oct 16, 2026 |
| CVE-2026-110014 |
The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a…
|
5.3
Medium
|
Oct 16, 2026 |
| CVE-2026-110015 |
The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API…
|
8.8
High
|
Oct 16, 2026 |
| CVE-2026-17023 |
The Salon Booking System WordPress plugin through 10.30.33 does not perform any capability check or validate an OAuth…
|
4.8
Medium
|
Aug 10, 2026 |
| CVE-2026-17020 |
The Salon Booking System WordPress plugin through 10.31.0 does not verify that a requested booking belongs to the…
|
4.3
Medium
|
Aug 10, 2026 |
| CVE-2026-17021 |
The Salon Booking System WordPress plugin before 10.30.34 does not properly restrict access to some of its…
|
5.3
Medium
|
Aug 10, 2026 |
| CVE-2026-17022 |
The Salon Booking System WordPress plugin before 10.30.34 does not properly validate a booking's ownership token before…
|
7.5
High
|
Aug 10, 2026 |
| CVE-2026-11887 |
The Salon Booking System WordPress plugin before 10.30.20 does not have proper authorisation checks on one of its…
|
4.3
Medium
|
Jul 1, 2026 |
| CVE-2024-2603 |
The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could…
|
6.3
Medium
|
Apr 26, 2024 |
| CVE-2024-2439 |
The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could…
|
4.8
Medium
|
Apr 26, 2024 |
| CVE-2024-2429 |
The Salon booking system WordPress plugin through 9.6.5 does not have CSRF check in place when updating its settings,…
|
4.3
Medium
|
Apr 26, 2024 |
| CVE-2024-2102 |
The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field…
|
4.7
Medium
|
Apr 17, 2024 |
| CVE-2024-2101 |
The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field…
|
5.7
Medium
|
Apr 17, 2024 |
| CVE-2022-0920 |
The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its…
|
Not rated
|
Apr 11, 2022 |
| CVE-2022-0919 |
The Salon booking system Free and pro WordPress plugins before 7.6.3 do not have proper authorisation when searching…
|
Not rated
|
Apr 11, 2022 |