wordpresschef

Products

Product	CVEs	Exploited	Latest
Salon Booking System – Free Version	7	–	Jul 10, 2026
Salon Booking Pro	1	–	May 16, 2025
Salon Booking System – Appointment Booking for Salons, Barbershops & Spas	1	–	Oct 16, 2026
Salon Booking System Pro	1	–	Mar 25, 2026

CVE-2026-109232 High 7.2 Salon Booking System <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAX 0.2%
CVE-2026-15070 High 8.8 Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameter 0.4%
CVE-2026-6320 High 7.5 Salon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal 0.4%
CVE-2026-25334 High 8.1 WordPress Salon Booking System Pro plugin < 10.30.12 - Account Takeover vulnerability 0.3%
CVE-2025-8492 Medium 5.3 Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Execution 0.3%
CVE-2025-32295 Medium 4.3 WordPress Salon Booking Wordpress plugin <= 10.10.2 - Broken Access Control vulnerability 0.3%
CVE-2024-3229 Critical 9.8 Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload 0.9%
CVE-2024-4468 Medium 4.3 Salon booking system <= 9.9 - Missing Authorization 0.4%
CVE-2024-4442 Critical 9.1 Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion 1.2%
CVE-2023-3427 Medium 5.4 Salon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customer 0.3%