Dimitri Grassi vulnerabilities

Products

• Salon Booking System 40

Newest

• dimitri grassi salon booking system Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code CVE-2026-110034 3.7 LowOctober 19, 2026
• dimitri grassi salon booking system Salon Booking System < 10.31.11 - Subscriber+ Coupon Code Disclosure via Discounts REST Route CVE-2026-110035 4.3 MediumOctober 18, 2026
• dimitri grassi salon booking system Salon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url' CVE-2026-110033 6.8 MediumOctober 18, 2026
• dimitri grassi salon booking system Salon Booking System < 10.31.11 - Salon Staff+ Administrator Role Demotion via Customer Editor CVE-2026-110032 5.5 MediumOctober 18, 2026
• dimitri grassi salon booking system Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key CVE-2026-110031 7.2 HighOctober 18, 2026
• dimitri grassi salon booking system Salon Booking System < 10.31.9 - Administrator Account Creation via CSRF CVE-2026-110015 8.8 HighOctober 16, 2026
• dimitri grassi salon booking system Salon Booking System < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and Status CVE-2026-110014 5.3 MediumOctober 16, 2026
• dimitri grassi salon booking system Salon Booking System < 10.31.9 - Unauthenticated Salon REST API Access via Predictable Access-Token CVE-2026-110013 4.8 MediumOctober 16, 2026
• dimitri grassi salon booking system Salon Booking System < 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcoming CVE-2026-110012 4.3 MediumOctober 16, 2026
• dimitri grassi salon booking system WordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-94668 7.1 HighOctober 9, 2026
• dimitri grassi salon booking system WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability CVE-2026-105070 8.8 HighOctober 6, 2026
• dimitri grassi salon booking system WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability CVE-2026-81793 6.5 MediumSeptember 10, 2026
• dimitri grassi salon booking system WordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerability CVE-2026-66453 9.8 CriticalAugust 13, 2026
• dimitri grassi salon booking system Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Google Calendar Connection Hijack via OAuth Callback CVE-2026-17023 4.8 MediumAugust 10, 2026
• dimitri grassi salon booking system Salon Booking System – Free Version < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking Wizard CVE-2026-17022 7.5 HighAugust 10, 2026
• dimitri grassi salon booking system Salon Booking System – Free Version < 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering CVE-2026-17021 5.3 MediumAugust 10, 2026
• dimitri grassi salon booking system Salon Booking System – Free Version <= 10.31.0 - Subscriber+ Arbitrary Booking PII Disclosure CVE-2026-17020 4.3 MediumAugust 10, 2026
• dimitri grassi salon booking system Salon Booking System < 10.30.20 - Subscriber+ Booking Approval Bypass CVE-2026-11887 4.3 MediumJuly 1, 2026
• dimitri grassi salon booking system WordPress Salon booking system plugin <= 10.30.24 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-40768 7.3 HighJune 17, 2026
• dimitri grassi salon booking system WordPress Salon booking system plugin <= 10.30.25 - Broken Access Control vulnerability CVE-2026-42666 7.5 HighJune 15, 2026
• dimitri grassi salon booking system WordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerability CVE-2025-67954 6.5 MediumJanuary 22, 2026
• dimitri grassi salon booking system WordPress Salon booking system plugin <= 10.30.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-66531 4.3 MediumDecember 9, 2025
• dimitri grassi salon booking system WordPress Salon booking system plugin <= 10.16 - CSRF to Arbitrary Content Deletion vulnerability CVE-2025-47583 5.4 MediumMay 19, 2025
• dimitri grassi salon booking system WordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerability CVE-2025-32220 5.4 MediumApril 4, 2025
• dimitri grassi salon booking system WordPress Salon booking system plugin < 10.15 - Privilege Escalation vulnerability CVE-2025-31560 7.2 HighApril 1, 2025
• dimitri grassi salon booking system WordPress Salon Booking Wordpress Plugin plugin <= 10.9 - Insecure Direct Object References (IDOR) vulnerability CVE-2024-47316 4.3 MediumOctober 5, 2024
• dimitri grassi salon booking system, salon booking system booking system +1 more WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability CVE-2024-39658 7.6 HighAugust 29, 2024
• dimitri grassi salon booking system, salon booking system booking system +1 more WordPress Salon Booking System plugin <= 10.8.1 - Open Redirection vulnerability CVE-2024-43280 4.7 MediumAugust 19, 2024
• dimitri grassi salon booking system, salon booking system booking system +1 more WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability CVE-2024-37231 8.6 HighJune 24, 2024
• dimitri grassi salon booking system, salon booking system booking system +1 more WordPress Salon booking system plugin < 8.7 - Editor+ Privilege Escalation vulnerability CVE-2023-48319 6.8 MediumMay 17, 2024
• dimitri grassi salon booking system, salon booking system booking system +1 more Salon booking system <= 9.6.5 - Editor+ Stored XSS via Email Settings CVE-2024-2603 6.3 MediumApril 26, 2024
• dimitri grassi salon booking system Salon booking system <= 9.6.5 - Editor+ Stored XSS CVE-2024-2439 4.8 MediumApril 26, 2024
• dimitri grassi salon booking system Salon booking system <= 9.6.5 - Settings Update via CSRF CVE-2024-2429 4.3 MediumApril 26, 2024
• dimitri grassi salon booking system Salon booking system < 9.6.3 - Unauthenticated Stored XSS CVE-2024-2102 4.7 MediumApril 17, 2024
• dimitri grassi salon booking system WordPress Plugin Salon Booking System < 9.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS) CVE-2024-2101 5.7 MediumApril 17, 2024
• dimitri grassi salon booking system, salon booking system booking system +1 more WordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerability CVE-2024-30510 10.0 CriticalMarch 29, 2024
• dimitri grassi salon booking system, salon booking system booking system +1 more Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote... CVE-2022-43487 6.1 MediumDecember 5, 2022
• dimitri grassi salon booking system, unknown salon booking system pro +1 more Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure CVE-2022-0920 7.5 HighApril 11, 2022
• dimitri grassi salon booking system, unknown salon booking system pro +1 more Salon booking system < 7.6.3 - Unauthenticated Sensitive Data Disclosure CVE-2022-0919 5.3 MediumApril 11, 2022
• dimitri grassi salon booking system, salon booking system booking system +1 more Salon Booking System < 6.3.1 - Unauthenticated Stored Cross-Site Scripting (XSS) CVE-2021-24429 6.1 MediumJuly 12, 2021