Salon booking system
Dimitri Grassi
Developer
10.31.11
Latest version
2,000
Installations
No date
Last updated
Vulnerability history
2 present
46 patched
19 Mitigation rules
- Salon Staff+ Administrator Role Demotion vulnerability< 10.31.111 day ago
- Salon Staff+ Privilege Escalation to Administrator vulnerability10.17-10.31.101 day ago
- Unauthenticated Negative Booking Total vulnerability< 10.31.111 day ago
- Salon Staff+ Stored XSS and SSRF vulnerability< 10.31.112 days ago
- Subscriber+ Coupon Code Disclosure vulnerability< 10.31.112 days ago
- Unauthenticated Salon REST API Access vulnerability< 10.31.94 days ago
- Subscriber+ Booking PII Disclosure vulnerability< 10.31.34 days ago
- Unauthenticated Booking Creation with Arbitrary Customer ID and Status vulnerability< 10.31.94 days ago
- Administrator Account Creation vulnerability< 10.31.94 days ago
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 10.31.94 days ago
- Privilege Escalation vulnerability<= 10.31.705/10/2026
- Cross Site Scripting (XSS) vulnerability<= 10.31.504/10/2026
- Broken Access Control vulnerability<= 10.31.1108/09/2026
- WordPress Salon Booking System - Free Version plugin < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking Wizard vulnerability< 10.30.3427/08/2026
- Broken Access Control vulnerability<= 10.31.127/08/2026
- Broken Access Control vulnerability<= 10.31.127/08/2026
- Subscriber+ Booking Approval Bypass vulnerability< 10.30.2025/08/2026
- WordPress Salon Booking System - Free Version plugin < 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering vulnerability< 10.30.3420/08/2026
- Broken Authentication vulnerability<= 10.30.2607/08/2026
- Cross-Site Request Forgery to Remote Code Execution vulnerability<= 10.30.3209/07/2026
- Broken Access Control vulnerability<= 10.30.2510/05/2026
- Unauthenticated Arbitrary File Read vulnerability<= 10.30.2505/05/2026
- Insecure Direct Object References (IDOR) vulnerability<= 10.30.2421/04/2026
- Unauthenticated Stored XSS vulnerability< 9.6.303/02/2026
- Sensitive Data Exposure vulnerability<= 10.30.321/01/2026
- Cross Site Request Forgery (CSRF) vulnerability<= 10.30.307/12/2025
- Broken Access Control vulnerability<= 10.2211/09/2025
- Admin+ Stored XSS vulnerability< 10.9.419/05/2025
- CSRF to Arbitrary Content Deletion vulnerability<= 10.1615/05/2025
- Broken Access Control vulnerability<= 10.31.1104/04/2025
- Privilege Escalation vulnerability< 10.1501/04/2025
- Insecure Direct Object References (IDOR) vulnerability<= 10.925/09/2024
- Open Redirection vulnerability<= 10.8.116/08/2024
- Authenticated SQL Injection vulnerability<= 10.701/08/2024
- Arbitrary File Deletion vulnerability<= 9.921/06/2024
- Unauthenticated Arbitrary File Upload vulnerability<= 10.218/06/2024
- Missing Authorization vulnerability<= 9.907/06/2024
- Editor+ Stored XSS via Email Settings vulnerability<= 9.6.526/04/2024
- Editor+ Stored XSS vulnerability<= 9.6.526/04/2024
- Settings Update via CSRF vulnerability<= 9.6.526/04/2024
- Unauthenticated Stored XSS vulnerability< 9.6.317/04/2024
- Arbitrary File Upload vulnerability<= 9.528/03/2024
- Editor+ Privilege Escalation vulnerability< 8.723/11/2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 8.4.719/07/2023
- Cross-Site Request Forgery (CSRF) vulnerability<= 8.4.727/06/2023
- Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability<= 7.6.128/02/2022
- Sensitive Information Disclosure vulnerability<= 7.6.128/02/2022
- Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability<= 6.321/06/2021