Skip to content
OpenAdvisories

Product · wordpresschef

Salon Booking System – Free Version

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-8492

    Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Execution

    The Salon Booking System, Appointment Scheduling for Salons, Spas & Small Businesses plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax function in all versions up to, and including, 10.22. Th…

    wordpresschef Salon Booking System – Free Version Web / CMS
  • Medium 4.3
    CVE-2024-4468

    Salon booking system <= 9.9 - Missing Authorization

    The Salon booking system plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on several functions hooked into admin_init in all versions up to, and including, 9.9. This makes it possible for aut…

    wordpresschef Salon Booking System – Free Version Web / CMS
  • Medium 5.4
    CVE-2023-3427

    Salon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customer

    The Salon Booking System plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.4.6. This is due to missing or incorrect nonce validation on the 'save_customer' function. This makes it possible for unauthenticated…

    wordpresschef Salon Booking System – Free Version Web / CMS