Unknown Salon Booking System vulnerabilities

13 CVEs affecting Unknown Salon Booking System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-110035, published 2026-10-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-17022, published 2026-08-10. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. The Salon Booking System WordPress plugin before 10.30.34 does not properly validate a booking's ownership token before loading it in its booking-wizard confirmation steps, allowing unauthenticated…
CVE-2026-17021, published 2026-08-10. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Salon Booking System WordPress plugin before 10.30.34 does not properly restrict access to some of its booking-modification AJAX actions and does not verify ownership of the targeted booking,…
CVE-2026-11887, published 2026-07-01. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Salon Booking System WordPress plugin before 10.30.20 does not have proper authorisation checks on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to modify a…
CVE-2026-17023, published 2026-08-10. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Salon Booking System WordPress plugin through 10.30.33 does not perform any capability check or validate an OAuth state value on its Google Calendar authorization callback, which is also hooked…
CVE-2026-17020, published 2026-08-10. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. The Salon Booking System WordPress plugin through 10.31.0 does not verify that a requested booking belongs to the caller on one of its REST API endpoints, requiring only a basic read capability,…
CVE-2026-110014, published 2026-10-16. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking status, allowing…
CVE-2026-110012, published 2026-10-16. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authenticated user such as a…
CVE-2026-110013, published 2026-10-16. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded in the Salon…
CVE-2026-110015, published 2026-10-16. High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days. The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authenticated sessions…
CVE-2026-110035, published 2026-10-18. The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon staff, allowing any authenticated user, such as a subscriber, to retrieve every…

Latest

CVE-2026-110033, published 2026-10-18. The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it server-side and writing the response to a publicly accessible location under…
CVE-2026-110032, published 2026-10-18. The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles may edit through the customers management screen, allowing users with the Salon…
CVE-2026-110031, published 2026-10-18. The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when editing a customer,…