DDimitri Grassi

Products

Exploited and recent CVEs

• CVE-2026-94668 High 7.1 WordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-105070 High 8.8 WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability 0.3%
• CVE-2026-81793 Medium 6.5 WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability 0.3%
• CVE-2026-66453 Critical 9.8 WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability 0.6%
• CVE-2026-40768 High 7.3 WordPress Salon booking system plugin <= 10.30.24 - Insecure Direct Object References (IDOR) vulnerability 0.3%
• CVE-2026-42666 High 7.5 WordPress Salon booking system plugin <= 10.30.25 - Broken Access Control vulnerability 0.3%
• CVE-2025-67954 Medium 6.5 WordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerability 0.4%
• CVE-2025-66531 Medium 4.3 WordPress Salon booking system plugin <= 10.30.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2025-47583 Medium 5.4 WordPress Salon booking system plugin <= 10.16 - CSRF to Arbitrary Content Deletion vulnerability 0.1%
• CVE-2025-32220 Medium 5.4 WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability 0.5%
• CVE-2025-31560 High 7.2 WordPress Salon booking system plugin < 10.15 - Privilege Escalation vulnerability 0.6%
• CVE-2024-47316 Medium 4.3 WordPress Salon Booking Wordpress Plugin plugin <= 10.9 - Insecure Direct Object References (IDOR) vulnerability 0.3%