Skip to content
OpenAdvisories

Vendor

Dimitri Grassi

12 known vulnerabilities.

Products

Salon booking system 12
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-81793

    WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through 10.31.9.

    Dimitri Grassi Salon booking system
  • Medium 6.5
    CVE-2025-67954

    WordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through <= 10.30.3.

    Dimitri Grassi Salon booking system
  • Medium 4.3
    CVE-2025-66531

    WordPress Salon booking system plugin <= 10.30.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through <= 10.30.3.

    Dimitri Grassi Salon booking system
  • Medium 5.4
    CVE-2025-47583

    WordPress Salon booking system plugin <= 10.16 - CSRF to Arbitrary Content Deletion vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking system: from n/a through <= 10.16.

    Dimitri Grassi Salon booking system
  • Medium 5.4
    CVE-2025-32220

    WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through 10.31.9.

    Dimitri Grassi Salon booking system
  • Medium 4.3
    CVE-2024-47316

    WordPress Salon Booking Wordpress Plugin plugin <= 10.9 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system salon-booking-system.This issue affects Salon booking system: from n/a through <= 10.9.

    Dimitri Grassi Salon booking system Web / CMS