Salon Booking System
Approved changes feed: RSS · Atom
cpe:2.3:a:salonbookingsystem:salon_booking_system:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Salonbookingsystem (bbbb989c-4278-577c-bd8e-75ce0508abc5) |
|---|---|
| Product | Salon Booking System (b0aee75a-3c80-5ae9-b001-215533d7edc5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-32220 |
vulnerable | 2026-06-08 07:18:59.322996 |
WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through 10.31.9.
Published: 2025-04-04T15:59:14.531Z
Updated: 2026-10-05T07:02:03.727Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31560 |
vulnerable | 2026-06-08 07:18:58.137195 |
WordPress Salon booking system plugin < 10.15 - Privilege Escalation vulnerability
HIGH (7.2)
Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Privilege Escalation.This issue affects Salon booking system: from n/a through < 10.15.
Published: 2025-04-01T20:58:12.843Z
Updated: 2026-04-28T16:12:09.084Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9882 |
vulnerable | 2026-06-08 07:00:28.843863 |
Salon Booking System < 10.9.4 - Admin+ Stored XSS
The Salon Booking System, Appointment Scheduling for Salons, Spas & Small Businesses WordPress plugin before 1.9.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Published: 2025-05-15T20:07:24.507Z
Updated: 2025-05-17T02:52:59.079Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4468 |
vulnerable | 2026-06-08 06:50:17.822134 |
Salon booking system <= 9.9 - Missing Authorization
MEDIUM (4.3)
The Salon booking system plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on several functions hooked into admin_init in all versions up to, and including, 9.9. This makes it possible for authenticated attackers with subscriber access or higher to modify plugin settings and view discount codes intended for other users.
Published: 2024-06-08T07:37:38.584Z
Updated: 2026-04-08T17:05:50.048Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4442 |
vulnerable | 2026-06-08 06:50:17.770391 |
Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion
CRITICAL (9.1)
The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 9.8. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for unauthenticated attackers to delete arbitrary files, including the wp-config.php file, which can make site takeover and remote code execution possible. This was partially patched in 9.9, and sufficiently patched in 10.0. CVE-2024-37231 appears to be a duplicate of this issue.
Published: 2024-05-21T06:49:55.436Z
Updated: 2026-04-08T17:31:03.779Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47316 |
vulnerable | 2026-06-08 06:48:11.758641 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43280 |
vulnerable | 2026-06-08 06:45:50.010125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3229 |
vulnerable | 2026-06-08 06:41:52.738073 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39658 |
vulnerable | 2026-06-08 06:41:51.296533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37231 |
vulnerable | 2026-06-08 06:39:46.931585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30510 |
vulnerable | 2026-06-08 06:35:30.484647 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2603 |
vulnerable | 2026-06-08 06:33:31.627324 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2439 |
vulnerable | 2026-06-08 06:33:31.116024 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2429 |
vulnerable | 2026-06-08 06:33:31.088804 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2102 |
vulnerable | 2026-06-08 06:33:30.343091 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2101 |
vulnerable | 2026-06-08 06:33:30.341518 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48319 |
vulnerable | 2026-06-08 06:14:26.878294 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3427 |
vulnerable | 2026-06-08 06:09:39.529157 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43487 |
vulnerable | 2026-06-08 05:49:32.135910 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0920 |
vulnerable | 2026-06-08 05:39:11.495010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0919 |
vulnerable | 2026-06-08 05:39:11.494462 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24429 |
vulnerable | 2026-06-08 05:30:04.365453 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.