Salon Booking System – Appointment Booking for Salons, Barbershops & Spas

Уязвимости

• CVE-2026-66453без авторизации≤ 10.30.26

  WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability

  Критич. 9.8

• CVE-2024-3229без авторизации≤ 10.2

  Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload

  Критич. 9.8

• CVE-2024-30510без авторизации≤ 9.5

  WordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerability

  Критич. 9.8

• CVE-2024-37231без авторизации≤ 9.9

  WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability

  Критич. 9.1

• CVE-2024-4442без авторизации≤ 9.9

  Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion

  Критич. 9.1

• CVE-2026-15070без авторизации · нужен клик≤ 10.30.32

  Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameter

  Высокий 8.8

• CVE-2025-32220нужен входисправления нет

  WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2024-47316нужен вход≤ 10.9

  WordPress Salon Booking Wordpress Plugin plugin <= 10.9 - Insecure Direct Object References (IDOR) vulnerability

  Высокий 8.8

• CVE-2026-42666без авторизации≤ 10.30.25

  WordPress Salon booking system plugin <= 10.30.25 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2026-6320без авторизации≤ 10.30.25

  Salon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal

  Высокий 7.5

• CVE-2026-40768без авторизации≤ 10.30.24

  WordPress Salon booking system plugin <= 10.30.24 - Insecure Direct Object References (IDOR) vulnerability

  Высокий 7.3

• CVE-2025-31560высокие права≤ 10.15

  WordPress Salon booking system plugin < 10.15 - Privilege Escalation vulnerability

  Высокий 7.2

• CVE-2024-39658высокие права≤ 10.7

  WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability

  Высокий 7.2

• CVE-2023-48319редактор+≤ 8.6

  WordPress Salon booking system plugin < 8.7 - Editor+ Privilege Escalation vulnerability

  Высокий 7.2

• CVE-2026-81793без авторизацииисправления нет

  WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2025-67954нужен вход≤ 10.30.3

  WordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerability

  Средний 6.5

• CVE-2024-43280без авторизации · нужен клик≤ 10.8.1

  WordPress Salon Booking System plugin <= 10.8.1 - Open Redirection vulnerability

  Средний 6.1

• CVE-2022-43487без авторизации · нужен клик

  Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacker to inject an arbit

  Средний 6.1

• CVE-2025-47583без авторизации · нужен клик≤ 10.16

  WordPress Salon booking system plugin <= 10.16 - CSRF to Arbitrary Content Deletion vulnerability

  Средний 5.4

• CVE-2024-4468подписчик+≤ 9.9

  Salon booking system <= 9.9 - Missing Authorization

  Средний 5.4

• CVE-2025-8492без авторизации≤ 10.22

  Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Execution

  Средний 5.3

• CVE-2025-66531без авторизации · нужен клик≤ 10.30.3

  WordPress Salon booking system plugin <= 10.30.3 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 4.3

• CVE-2023-3427без авторизации · нужен клик≤ 8.4.7

  Salon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customer

  Средний 4.3