CVE-2026-109232

The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln' parameter in all versions up to, and including, 10.31.9 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-110014

The Salon Booking System WordPress plugin, in versions prior to 10.31.9 , is vulnerable to an authorization bypass. The software fails to properly verify permissions before creating a booking and incorrectly trusts caller-supplied user identifiers and booking statuses. This allows unauthenticated...

CVE-2026-110012

The Salon Booking System WordPress plugin, in versions before 10.31.3 , contains a vulnerability where several booking REST API routes lack proper capability restrictions. This flaw allows any authenticated user, such as a subscriber , to access and read every customer's booking records, leading ...

EUVD-2026-102691

The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authenticated user such as a subscriber to read every customer's booking records, including their personal data...

EUVD-2026-102694

The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST API, allowing unauthenticated attackers who trick a logged-in administrator in...

CVE-2026-110015

The Salon Booking System WordPress plugin, in versions before 10.31.9 , is vulnerable to a Cross-Site Request Forgery (CSRF) . The plugin fails to properly verify the authenticity of REST API requests and intentionally discards the standard WordPress core nonce check for cookie-authenticated sess...

CVE-2026-110013

The Salon Booking System WordPress plugin before version 10.31.9 is vulnerable to unauthenticated Salon REST API access due to predictable access tokens. The root cause is that the plugin fails to use a secure random source, instead deriving tokens from a hardcoded value and the timestamp (second...

EUVD-2026-102692

The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress plugin before 10.31.9 and the second at which a token was issued. An attacker ab...

CVE-2026-110012 Salon Booking System < 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcoming

The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authenticated user such as a subscriber to read every customer's booking records, including their personal data...

EUVD-2026-102693

The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers to create bookings attributed to arbitrary users, overwrite those users'...

CVE-2026-110014 Salon Booking System < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and Status

The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing unauthenticated attackers to create bookings attributed to arbitrary users, overwrite those users'...

CVE-2026-110015 Salon Booking System < 10.31.9 - Administrator Account Creation via CSRF

The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions across the whole REST API, allowing unauthenticated attackers who trick a logged-in administrator in...

CVE-2026-110013 Salon Booking System < 10.31.9 - Unauthenticated Salon REST API Access via Predictable Access-Token

The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon Booking System WordPress plugin before 10.31.9 and the second at which a token was issued. An attacker ab...

WordPress Salon Booking System plugin < 10.31.9 - Administrator Account Creation vulnerability

Administrator Account Creation vulnerability discovered by Raphael P. Cigana in WordPress Plugin Salon booking system versions 10.31.9...

WordPress Salon Booking System plugin < 10.31.3 - Subscriber+ Booking PII Disclosure vulnerability

Subscriber+ Booking PII Disclosure vulnerability discovered by Andy Urlep in WordPress Plugin Salon booking system versions 10.31.3...

WordPress Salon Booking System plugin < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and Status vulnerability

Unauthenticated Booking Creation with Arbitrary Customer ID and Status vulnerability discovered by Raphael P. Cigana in WordPress Plugin Salon booking system versions 10.31.9...

CVE-2026-109232

The Salon Booking System WordPress plugin (versions up to and including 10.31.9 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the 'sln[]' parameter. This flaw allows unauthenticated attackers to inject arbitrary...

CVE-2026-109232 Salon Booking System <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAX

The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln' parameter in all versions up to, and including, 10.31.9 due to insufficient input sanitization and output escaping. This makes it possible...

EUVD-2026-102670

The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln' parameter in all versions up to, and including, 10.31.9 due to insufficient input sanitization and output escaping. This makes it possible...

PT-2026-116104

Fuint through commit 57ec018 contains an insecure direct object reference vulnerability that allows authenticated members to read other members' booking records by supplying arbitrary bookId values to /clientApi/book/myBookDetail. Attackers can iterate the auto-increment bookId to retrieve contac...