Salon Booking System – Free Version

Vulnerabilities 33Slug salon-booking-systemLatest version 10.30.27WordPress.org →

Minimum safe version

10.30.26

Update to 10.30.26 or later to address 32 fixable vulnerabilities

Latest available10.30.27 ✓⚠ 1 vulnerability has no fix
N/A
2026-04-21< 10.30.25

Salon Booking System – Free Version <= 10.30.24 - Unauthenticated Insecure Direct Object Reference

WordfenceCVE
Medium 5.3
2025-09-11< 10.24

Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Execution

EUVDWordfenceCVE
Medium 4.3
2025-12-09< 10.30.4

CVE-2025-66531

CVEWordfence
High 8.8 Unfixed
2025-04-04≤ 10.30.26

WordPress Salon booking system plugin <= 10.30.23 - Broken Access Control vulnerability

CVEWordfenceEUVD
Medium 4.8
2025-05-15< 10.9.4

Salon Booking System <= 10.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 6.3
2024-10-16< 7.6.3

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE
N/A
2023-07-19< 8.4.9

WordPress Salon booking system Plugin <= 8.4.7 is vulnerable to Cross Site Scripting (XSS)

PatchstackWPScanCVE
N/A
2022-03-04< 7.6.3

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence
N/A
2022-11-08< 7.9

WordPress Plugin "Salon booking system" vulnerable to cross-site scripting

JVN
N/A
2022-02-28< 7.6.3

WordPress Salon booking system plugin <= 7.6.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack