Wordpresschef vulnerabilities

Products

• Salon Booking System – Free Version 8
• Salon Booking System Pro 3

Newest

• wordpresschef salon booking system – appointment booking for salons, barbershops & spas Salon Booking System <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAX CVE-2026-109232 7.2 HighOctober 16, 2026
• wordpresschef salon booking system – free version Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameter CVE-2026-15070 8.8 HighJuly 10, 2026
• wordpresschef salon booking system – free version Salon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal CVE-2026-6320 7.5 HighMay 2, 2026
• wordpresschef salon booking system pro WordPress Salon Booking System Pro plugin < 10.30.12 - Account Takeover vulnerability CVE-2026-25334 8.1 HighMarch 25, 2026
• wordpresschef salon booking system – free version Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Execution CVE-2025-8492 5.3 MediumSeptember 11, 2025
• wordpresschef salon booking pro WordPress Salon Booking Wordpress plugin <= 10.10.2 - Broken Access Control vulnerability CVE-2025-32295 4.3 MediumMay 16, 2025
• salonbookingsystem salon booking system, unknown salon booking system, appointment scheduling for salons, spas & small businesses +1 more Salon Booking System < 10.9.4 - Admin+ Stored XSS CVE-2024-9882 4.8 MediumMay 15, 2025
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• salonbookingsystem salon booking system, wordpresschef salon booking system – free version +1 more Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload CVE-2024-3229 9.8 CriticalJune 19, 2024
• salonbookingsystem salon booking system, wordpresschef salon booking system – free version +1 more Salon booking system <= 9.9 - Missing Authorization CVE-2024-4468 4.3 MediumJune 8, 2024
• salonbookingsystem salon booking system, wordpresschef salon booking system – free version +1 more Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion CVE-2024-4442 Public exploit 9.1 CriticalMay 21, 2024
• salonbookingsystem salon booking system, wordpresschef salon booking system – free version +1 more Salon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customer CVE-2023-3427 5.4 MediumJune 28, 2023
• dimitri grassi salon booking system, unknown salon booking system pro +1 more Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosure CVE-2022-0920 7.5 HighApril 11, 2022
• dimitri grassi salon booking system, unknown salon booking system pro +1 more Salon booking system < 7.6.3 - Unauthenticated Sensitive Data Disclosure CVE-2022-0919 5.3 MediumApril 11, 2022