WordPress theme
Spa and Salon security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
2Known vulnerabilities
- Critical0
- High0
- Medium2
- Low0
All Spa and Salon vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤1.3.2Update to 1.3.3 | CVE-2026-25374 | |
| Medium4.3 | Cross-Site Request Forgery to Notice Dismissal ≤1.2.7Update to 1.2.8 | CVE-2024-31384 |
- Medium5.3Missing Authorization
≤1.3.2Update to 1.3.3
- Medium4.3Cross-Site Request Forgery to Notice Dismissal
≤1.2.7Update to 1.2.8
Spa and Salon: common questions
Does Spa and Salon have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Spa and Salon: 2 medium. None are known to affect version null.
How do I check which version of Spa and Salon I run?
In wp-admin open Appearance → Themes and select the theme; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Spa and Salon vulnerability?
CVE-2026-25374, published Feb 18, 2026: Spa and Salon <= 1.3.2 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Spa and Salon vulnerability listed in CISA KEV?
No. None of the known Spa and Salon vulnerabilities is currently listed in the CISA KEV catalog.