wordpresschef vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20244
3. 20252
4. 20264

Newest CVEs

• CVE-2026-109232

  Salon Booking System <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAX

  wordpresschef · Salon Booking System – Appointment Booking for Salons, Barbershops & Spas

  High7.2
• CVE-2026-15070

  Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameter

  wordpresschef · Salon Booking System – Free Version

  High8.8
• CVE-2026-6320

  Salon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal

  wordpresschef · Salon Booking System – Free Version

  High7.5
• CVE-2026-25334

  WordPress Salon Booking System Pro plugin < 10.30.12 - Account Takeover vulnerability

  wordpresschef · Salon Booking System Pro

  High8.1
• CVE-2025-8492

  Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Execution

  wordpresschef · Salon Booking System – Free Version

  Medium5.3
• CVE-2025-32295

  WordPress Salon Booking Wordpress plugin <= 10.10.2 - Broken Access Control vulnerability

  wordpresschef · Salon Booking Pro

  Medium4.3
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2024-3229

  Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload

  wordpresschef · Salon Booking System – Free Version

  Critical9.8
• CVE-2024-4468

  Salon booking system <= 9.9 - Missing Authorization

  wordpresschef · Salon Booking System – Free Version

  Medium4.3
• CVE-2024-4442

  Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion

  wordpresschef · Salon Booking System – Free Version

  Critical9.1