Unknown Salon Booking System

• CVE-2026-110034 Low 3.7 Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code 0.2%
• CVE-2026-110035 Medium 4.3 Salon Booking System < 10.31.11 - Subscriber+ Coupon Code Disclosure via Discounts REST Route 0.2%
• CVE-2026-110033 Medium 6.8 Salon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url' 0.2%
• CVE-2026-110032 Medium 5.5 Salon Booking System < 10.31.11 - Salon Staff+ Administrator Role Demotion via Customer Editor 0.2%
• CVE-2026-110031 High 7.2 Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key 0.2%
• CVE-2026-110015 High 8.8 Salon Booking System < 10.31.9 - Administrator Account Creation via CSRF 0.1%
• CVE-2026-110014 Medium 5.3 Salon Booking System < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and Status 0.2%
• CVE-2026-110013 Medium 4.8 Salon Booking System < 10.31.9 - Unauthenticated Salon REST API Access via Predictable Access-Token 0.2%
• CVE-2026-110012 Medium 4.3 Salon Booking System < 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcoming 0.2%
• CVE-2026-17023 Medium 4.8 Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Google Calendar Connection Hijack via OAuth Callback 0.3%
• CVE-2026-17022 High 7.5 Salon Booking System – Free Version < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking Wizard 0.4%
• CVE-2026-17021 Medium 5.3 Salon Booking System – Free Version < 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering 0.3%
• CVE-2026-17020 Medium 4.3 Salon Booking System – Free Version <= 10.31.0 - Subscriber+ Arbitrary Booking PII Disclosure 0.3%
• CVE-2026-11887 Medium 4.3 Salon Booking System < 10.30.20 - Subscriber+ Booking Approval Bypass 0.3%
• CVE-2024-2603 Medium 6.3 Salon booking system <= 9.6.5 - Editor+ Stored XSS via Email Settings 0.5%
• CVE-2024-2439 Medium 4.8 Salon booking system <= 9.6.5 - Editor+ Stored XSS 0.4%
• CVE-2024-2429 Medium 4.3 Salon booking system <= 9.6.5 - Settings Update via CSRF 0.2%
• CVE-2024-2102 Medium 4.7 Salon booking system < 9.6.3 - Unauthenticated Stored XSS 0.5%
• CVE-2024-2101 Medium 5.7 WordPress Plugin Salon Booking System < 9.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS) 0.6%
• CVE-2022-0920 Unrated Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure 1.5%
• CVE-2022-0919 Unrated Salon booking system < 7.6.3 - Unauthenticated Sensitive Data Disclosure 1.2%