Salon Booking System – Appointment Booking for Salons, Barbershops & Spas vulnerabilities
Plugin slug salon-booking-system · 50 known vulnerabilities · latest disclosed 2026-10-16 · WordPress.org page
2 vulnerabilities have no fixed version yet. If you use this plugin, consider disabling or replacing it until a fix is released.
14 of 50 rated high or critical (CVSS 7 or more).
Known vulnerabilities in Salon Booking System – Appointment Booking for Salons, Barbershops & Spas
| Severity | Affected versions | Fixed in | CVE | Published | Details |
|---|---|---|---|---|---|
| Medium 5.3 | <= 10.31.10 | 10.31.11 | CVE-2026-110034 | 2026-10-16 | Advisory |
| Medium 4.3 | <= 10.31.10 | 10.31.11 | CVE-2026-110032 | 2026-10-16 | Advisory |
| Medium 6.4 | <= 10.31.10 | 10.31.11 | CVE-2026-110033 | 2026-10-16 | Advisory |
| High 8.8 | 10.17 to 10.31.10 | 10.31.11 | CVE-2026-110031 | 2026-10-16 | Advisory |
| Medium 4.3 | <= 10.31.10 | 10.31.11 | CVE-2026-110035 | 2026-10-16 | Advisory |
| High 7.2 | <= 10.31.9 | 10.31.10 | CVE-2026-109232 | 2026-10-15 | Advisory |
| Medium 4.3 | <= 10.31.2 | 10.31.3 | CVE-2026-110012 | 2026-10-14 | Advisory |
| Medium 6.5 | <= 10.31.8 | 10.31.9 | CVE-2026-110013 | 2026-10-14 | Advisory |
| Medium 5.3 | <= 10.31.8 | 10.31.9 | CVE-2026-110014 | 2026-10-14 | Advisory |
| Medium 4.3 | <= 10.31.8 | 10.31.9 | CVE-2026-110015 | 2026-10-14 | Advisory |
| High 7.3 | <= 10.31.7 | 10.31.9 | CVE-2026-105070 | 2026-10-05 | Advisory |
| High 7.2 | <= 10.31.5 | 10.31.6 | CVE-2026-94668 | 2026-10-04 | Advisory |
| Medium 5.3 | <= 10.31.5 | No fix yet | CVE-2026-81793 | 2026-09-08 | Advisory |
| Medium 4.3 | <= 10.30.19 | 10.30.20 | CVE-2026-11887 | 2026-08-10 | Advisory |
| Medium 5.3 | <= 10.30.26 | 10.30.27 | CVE-2026-66453 | 2026-08-07 | Advisory |
| Medium 5.3 | < 10.31.3 | 10.31.3 | CVE-2026-17023 | 2026-08-06 | Advisory |
| Medium 5.3 | <= 10.30.33 | 10.30.34 | CVE-2026-17022 | 2026-08-06 | Advisory |
| Medium 5.3 | <= 10.30.33 | 10.30.34 | CVE-2026-17021 | 2026-08-06 | Advisory |
| Medium 4.3 | < 10.31.3 | 10.31.3 | CVE-2026-17020 | 2026-08-06 | Advisory |
| High 8.8 | <= 10.30.32 | 10.30.33 | CVE-2026-15070 | 2026-07-09 | Advisory |
| Medium 5.3 | <= 10.30.25 | 10.30.26 | CVE-2026-42666 | 2026-05-10 | Advisory |
| High 7.5 | <= 10.30.25 | 10.30.26 | CVE-2026-6320 | 2026-05-01 | Advisory |
| Medium 5.3 | <= 10.30.24 | 10.30.25 | CVE-2026-40768 | 2026-04-21 | Advisory |
| Low 3.1 | <= 10.30.3 | 10.30.4 | CVE-2025-67954 | 2026-01-21 | Advisory |
| Medium 4.3 | <= 10.30.3 | 10.30.4 | CVE-2025-66531 | 2025-12-07 | Advisory |
| Medium 5.3 | <= 10.22 | 10.24 | CVE-2025-8492 | 2025-09-10 | Advisory |
| Medium 4.3 | <= 10.16 | 10.17 | CVE-2025-47583 | 2025-05-15 | Advisory |
| Medium 4.3 | <= 10.29.6 | No fix yet | CVE-2025-32220 | 2025-04-04 | Advisory |
| High 8.8 | <= 10.11 | 10.15 | CVE-2025-31560 | 2025-04-01 | Advisory |
| Medium 4.3 | <= 10.9 | 10.9.1 | CVE-2024-47316 | 2024-09-25 | Advisory |
| Medium 4.4 | <= 10.9.3 | 10.9.4 | CVE-2024-9882 | 2024-09-13 | Advisory |
| Medium 6.1 | <= 10.8.1 | 10.9 | CVE-2024-43280 | 2024-08-16 | Advisory |
| Critical 9.1 | <= 10.7 | 10.8 | CVE-2024-39658 | 2024-08-01 | Advisory |
| Critical 9.8 | <= 10.2 | 10.3 | CVE-2024-3229 | 2024-06-18 | Advisory |
| Medium 4.3 | <= 9.9 | 10.0 | CVE-2024-4468 | 2024-06-07 | Advisory |
| Critical 9.1 | <= 9.9 | 10.0 | CVE-2024-4442 | 2024-05-17 | Advisory |
| Medium 4.3 | <= 9.6.5 | 9.6.6 | CVE-2024-2429 | 2024-04-26 | Advisory |
| Medium 4.4 | <= 9.6.5 | 9.6.6 | CVE-2024-2603 | 2024-04-05 | Advisory |
| Medium 4.4 | <= 9.6.5 | 9.6.6 | CVE-2024-2439 | 2024-04-05 | Advisory |
| Critical 10 | <= 9.5 | 9.5.1 | CVE-2024-30510 | 2024-03-28 | Advisory |
| High 7.2 | <= 9.6.2 | 9.6.3 | CVE-2024-2102 | 2024-03-27 | Advisory |
| Medium 5.4 | <= 9.6.2 | 9.6.3 | CVE-2024-2101 | 2024-03-27 | Advisory |
| High 7.2 | < 8.7 | 8.7 | CVE-2023-48319 | 2023-11-23 | Advisory |
| Medium 6.1 | <= 8.4.8 | 8.4.9 | CVE-2023-33999 | 2023-07-18 | Advisory |
| Medium 5.4 | <= 8.4.7 | 8.4.8 | CVE-2023-3427 | 2023-06-27 | Advisory |
| Medium 6.1 | <= 7.9 | 7.9.4 | CVE-2022-43487 | 2022-11-08 | Advisory |
| Medium 5.3 | <= 7.6.2 | 7.6.3 | CVE-2022-0919 | 2022-03-21 | Advisory |
| High 7.5 | <= 7.6.2 | 7.6.3 | CVE-2022-0920 | 2022-03-21 | Advisory |
| Medium 6.3 | < 7.6.3 | 7.6.3 | CVE-2022-4974 | 2022-03-04 | Advisory |
| Medium 6.1 | < 6.3.1 | 6.3.1 | CVE-2021-24429 | 2021-06-21 | Advisory |
Check if a site is affected
Enter a site address to see which version of Salon Booking System – Appointment Booking for Salons, Barbershops & Spas and other plugins it runs, and whether they match a known vulnerability.
Questions
Is the Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin safe to use?
2 known issue(s) have no fix yet, so check the table above before using it.
How do I check which version of Salon Booking System – Appointment Booking for Salons, Barbershops & Spas my site runs?
In WordPress go to Plugins > Installed Plugins. From the outside, the free PluginPeek scan below reads the version from the site's public files.
How do I fix a vulnerable plugin?
Make a full backup, then update it from Dashboard > Updates and check the site afterwards. If you would rather not, we can do it for a fixed $99, paid after you have checked the site.