Skip to contentDimitri Grassi Salon Booking System vulnerabilities
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.31.14 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1242727.1 High
- dimitri grassi salon booking systemSalon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount CodeCVE-2026-1100343.7 Low
- dimitri grassi salon booking systemSalon Booking System < 10.31.11 - Subscriber+ Coupon Code Disclosure via Discounts REST RouteCVE-2026-1100354.3 Medium
- dimitri grassi salon booking systemSalon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url'CVE-2026-1100336.8 Medium
- dimitri grassi salon booking systemSalon Booking System < 10.31.11 - Salon Staff+ Administrator Role Demotion via Customer EditorCVE-2026-1100325.5 Medium
- dimitri grassi salon booking systemSalon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta KeyCVE-2026-1100317.2 High
- dimitri grassi salon booking systemSalon Booking System < 10.31.9 - Administrator Account Creation via CSRFCVE-2026-1100158.8 High
- dimitri grassi salon booking systemSalon Booking System < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and StatusCVE-2026-1100145.3 Medium
- dimitri grassi salon booking systemSalon Booking System < 10.31.9 - Unauthenticated Salon REST API Access via Predictable Access-TokenCVE-2026-1100134.8 Medium
- dimitri grassi salon booking systemSalon Booking System < 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcomingCVE-2026-1100124.3 Medium
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-946687.1 High
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerabilityCVE-2026-1050708.8 High
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerabilityCVE-2026-817936.5 Medium
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.30.26 - Broken Authentication vulnerabilityCVE-2026-664539.8 Critical
- dimitri grassi salon booking systemSalon Booking System – Free Version <= 10.30.33 - Unauthenticated Google Calendar Connection Hijack via OAuth CallbackCVE-2026-170234.8 Medium
- dimitri grassi salon booking systemSalon Booking System – Free Version < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking WizardCVE-2026-170227.5 High
- dimitri grassi salon booking systemSalon Booking System – Free Version < 10.30.34 - Unauthenticated Arbitrary Booking Total TamperingCVE-2026-170215.3 Medium
- dimitri grassi salon booking systemSalon Booking System – Free Version <= 10.31.0 - Subscriber+ Arbitrary Booking PII DisclosureCVE-2026-170204.3 Medium
- dimitri grassi salon booking systemSalon Booking System < 10.30.20 - Subscriber+ Booking Approval BypassCVE-2026-118874.3 Medium
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.30.24 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-407687.3 High
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.30.25 - Broken Access Control vulnerabilityCVE-2026-426667.5 High
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.30.3 - Sensitive Data Exposure vulnerabilityCVE-2025-679546.5 Medium
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.30.3 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-665314.3 Medium
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.16 - CSRF to Arbitrary Content Deletion vulnerabilityCVE-2025-475835.4 Medium
- dimitri grassi salon booking systemWordPress Salon booking system plugin <= 10.31.9 - Broken Access Control vulnerabilityCVE-2025-322205.4 Medium
- dimitri grassi salon booking systemWordPress Salon booking system plugin < 10.15 - Privilege Escalation vulnerabilityCVE-2025-315607.2 High
- dimitri grassi salon booking systemWordPress Salon Booking Wordpress Plugin plugin <= 10.9 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2024-473164.3 Medium
- dimitri grassi salon booking system, salon booking system booking system +1 moreWordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerabilityCVE-2024-396587.6 High
- dimitri grassi salon booking system, salon booking system booking system +1 moreWordPress Salon Booking System plugin <= 10.8.1 - Open Redirection vulnerabilityCVE-2024-432804.7 Medium
- dimitri grassi salon booking system, salon booking system booking system +1 moreWordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerabilityCVE-2024-372318.6 High
- dimitri grassi salon booking system, salon booking system booking system +1 moreWordPress Salon booking system plugin < 8.7 - Editor+ Privilege Escalation vulnerabilityCVE-2023-483196.8 Medium
- dimitri grassi salon booking system, salon booking system booking system +1 moreSalon booking system <= 9.6.5 - Editor+ Stored XSS via Email SettingsCVE-2024-26036.3 Medium
- dimitri grassi salon booking systemSalon booking system <= 9.6.5 - Editor+ Stored XSSCVE-2024-24394.8 Medium
- dimitri grassi salon booking systemSalon booking system <= 9.6.5 - Settings Update via CSRFCVE-2024-24294.3 Medium
- dimitri grassi salon booking systemSalon booking system < 9.6.3 - Unauthenticated Stored XSSCVE-2024-21024.7 Medium
- dimitri grassi salon booking systemWordPress Plugin Salon Booking System < 9.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)CVE-2024-21015.7 Medium
- dimitri grassi salon booking system, salon booking system booking system +1 moreWordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerabilityCVE-2024-3051010.0 Critical
- dimitri grassi salon booking system, salon booking system booking system +1 moreCross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote...CVE-2022-434876.1 Medium
- dimitri grassi salon booking system, unknown salon booking system pro +1 moreSalon booking system < 7.6.3 - Customer+ Bookings/Customers Data DisclosureCVE-2022-09207.5 High
- dimitri grassi salon booking system, unknown salon booking system pro +1 moreSalon booking system < 7.6.3 - Unauthenticated Sensitive Data DisclosureCVE-2022-09195.3 Medium
- dimitri grassi salon booking system, salon booking system booking system +1 moreSalon Booking System < 6.3.1 - Unauthenticated Stored Cross-Site Scripting (XSS)CVE-2021-244296.1 Medium