Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Salon Booking System 10.30.34 Clear all filters
TI-2026-14174 CVE-2026-17022 · GHSA-9jp6-8vxq-2865

Salon Booking System – Free Version < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking Wizard

Priority HIGH 72

The Salon Booking System WordPress plugin before 10.30.34 does not properly validate a booking's ownership token before loading it in its booking-wizard confirmation steps, allowing unauthenticated attackers to disclose…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00434 Published 2026-08-10 Fixed in 10.30.34 CWE-200
TI-2026-14173 CVE-2026-17021 · GHSA-jf35-5rcj-7rqm

Salon Booking System – Free Version < 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering

Priority LOW 30

The Salon Booking System WordPress plugin before 10.30.34 does not properly restrict access to some of its booking-modification AJAX actions and does not verify ownership of the targeted booking, allowing unauthenticated…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00304 Published 2026-08-10 Fixed in 10.30.34 CWE-862