Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-67954 EUVD-2026-4032GHSA-hhmh-3f46-5wj7

WordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Retrieve Embedded Sensitive Data.This issue affects Salon booking system: from n/a through <= 10.30.3.

Affected products

VendorProductAffectedFixed
Dimitri Grassi Salon booking system ≤ 10.30.3 —

References