WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Salon Booking System – Appointment Booking for Salons, Barbershops & Spas

Appointment booking built for hair salons, barbershops, spas and beauty pros. Online scheduling, SMS and email reminders, Google Calendar sync.

35Reported vulnerabilities
10Highest CVSS score
10.31.2Latest version
2,000+Active installs

What to do now

Update Salon Booking System – Appointment Booking for Salons, Barbershops & Spas to 10.30.34 or later. 32 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-0920 High 7.5 1.5% Before 7.6.3 7.6.3 April 11, 2022
CVE-2021-24429 Medium 6.1 1.2% Before 6.3.1 6.3.1 July 12, 2021
CVE-2024-2603 Medium 6.3 0.5% Before 9.6.6 9.6.6 April 26, 2024
CVE-2024-3229 Critical 9.8 0.9% Before 10.3 10.3 June 19, 2024
CVE-2024-30510 Critical 10 0.7% 9.5 and earlier 9.5.1 March 28, 2024
CVE-2024-2101 Medium 5.7 0.6% Before 9.6.3 9.6.3 April 17, 2024
CVE-2022-0919 Medium 5.3 1.2% Before 7.6.3 7.6.3 April 11, 2022
CVE-2024-4442 Critical 9.1 1.2% Before 10.0 10.0 May 21, 2024
CVE-2024-39658 Critical 9.1 0.4% 10.7 and earlier 10.8 August 1, 2024
CVE-2026-15070 High 8.8 0.4% 0 to 10.30.32 (inclusive) 10.30.33 July 10, 2026
CVE-2024-9882 Medium 4.8 0.3% Before 1.9.4 1.9.4 May 15, 2025
CVE-2025-31560 High 8.8 0.5% 10.11 and earlier 10.15 April 1, 2025
CVE-2024-2439 Medium 4.8 0.4% Before 9.6.6 9.6.6 April 26, 2024
CVE-2024-2102 Medium 4.7 0.5% Before 9.6.3 9.6.3 April 17, 2024
CVE-2024-2429 Medium 4.3 0.2% Before 9.6.6 9.6.6 April 26, 2024
CVE-2026-17022 High 7.5 0.3% 0 up to (but not including) 10.30.34 10.30.34 August 10, 2026
CVE-2026-6320 High 7.5 0.4% 0 to 10.30.25 (inclusive) 10.30.26 May 2, 2026
CVE-2023-48319 High 7.2 0.5% Before 8.7 8.7 November 23, 2023
CVE-2022-43487 Medium 6.1 0.8% 7.9 and earlier 7.9.4 November 8, 2022
CVE-2024-43280 Medium 6.1 0.3% 10.8.1 and earlier 10.9 August 16, 2024
CVE-2024-4468 Medium 5.4 0.4% Before 10.0 10.0 June 8, 2024
CVE-2026-17021 Medium 5.3 0.2% 0 up to (but not including) 10.30.34 10.30.34 August 10, 2026
CVE-2026-66453 Medium 5.3 0.4% 10.30.26 and earlier 10.30.27 August 7, 2026
CVE-2026-17023 Medium 5.3 0.2% 10.30.33 and earlier — August 6, 2026
CVE-2026-42666 Medium 5.3 0.3% 10.30.25 and earlier 10.30.26 May 10, 2026
CVE-2026-40768 Medium 5.3 0.3% 10.30.24 and earlier 10.30.25 April 21, 2026
CVE-2025-8492 Medium 5.3 0.3% 0 to 10.22 (inclusive) 10.24 September 11, 2025
CVE-2025-32220 Medium 4.3 0.5% 10.29.6 and earlier — April 4, 2025
CVE-2026-11887 Medium 4.3 0.3% 10.30.19 and earlier 10.30.20 August 10, 2026
CVE-2026-17020 Medium 4.3 0.2% 10.31.0 and earlier — August 6, 2026
CVE-2025-66531 Medium 4.3 0.2% 10.30.3 and earlier 10.30.4 December 7, 2025
CVE-2025-47583 Medium 4.3 0.1% 10.16 and earlier 10.17 May 15, 2025
CVE-2024-47316 Medium 4.3 0.3% 10.9 and earlier 10.9.1 September 25, 2024
CVE-2023-3427 Medium 4.3 0.3% 8.4.6 and earlier 8.4.8 June 28, 2023
CVE-2025-67954 Low 3.1 0.4% 10.30.3 and earlier 10.30.4 January 21, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.