Salon Booking System – Appointment Booking for Salons, Barbershops & Spas

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ magnelovold

   1mo ago

   I’ve been using Salon Booking to manage my spa business for more than five years, and I can honestly say it is one of the most complete appointment booking plugins available for WordPress. The plugin is powerful, flexible and reliable, and it has allowed us to build a professional online booking experience for our customers. Throughout these years it has become an essential part of our daily business. One thing I especially appreciate is the team’s responsiveness. During the Norwegian localization process I translated more than 2,600 strings, tested several versions in a live environment, and reported translation and localization issues. The Salon Booking Team not only accepted the translations but also implemented several suggestions that improved the localization system itself. That level of support and willingness to improve the product is something you don’t see very often. The plugin offers an impressive number of features while still allowing customization through hooks, filters and small MU-plugins when needed. This has made it possible for us to tailor the booking experience to our business without modifying the core plugin. No software is perfect, and I have suggested a few additional improvements for future releases, but the team has always been open to feedback and continues to improve the plugin. If you’re looking for a professional, feature-rich and reliable appointment booking system for WordPress, I can highly recommend Salon Booking. Thank you, Salon Booking Team, for creating such an excellent plugin and for your outstanding support over the years.

   Read on wp.org ↗
2. ★★★★★ lukafuka

   6mo ago

   I tried almost all the most popular booking plugins, and this one offers the best functionality in its free version. You have the possibility to set everything very granularly. The only con is that it has a lot of bugs, but the developers react very fast with fixes.

   Read on wp.org ↗
3. ★★★★★ idunatek

   10mo ago

   The plugin offers everything you would expect from a booking plugin, and the price for the Pro version is really fair, but the best thing was the direct support. The developers even made a change to the code to cover my specific use case.

   Read on wp.org ↗
4. ★★★★★ kordiler

   2.6y ago

   In general, I cannot recommend this plugin at all. If you need a working plugin go for Amelia, really solid plugin offering everything you could possibly need. Back to Salon, sorry to say but for business websites use it is a trash. To be more specific I have purchased Pro version but still suffered: Poor support Salon seems to be a beta-plugin. The backend design, logic of the setting etc. is very week. For me, it took weeks before guy from support could help me to finally make the plugin work. The documentation is chaotic, doesn’t include understandable instructions. Video tutorials are ridiculous – music on the background ? Seriously ? On top of that, I doubt there is more then 2 people in the background. It is more or less one man show. What you can possible expect from broken plugin with 0 support… Front end seems to be fine but… Front end in demos looks nice, it take some time to understand how categories are working. But it give your really low level of adjustability in real page integration it is very tough to properly fit it into your stilling. Resolution on 4K screen – disaster. Short code implementation – some nice block editing ??? Forget… Adjustability – there is basically nothing you can change. I really missed customization of the email notification. You have a template, with four tags. You can only change the text…no variables. Why you don’t allow user to insert a HTLM code – it is standard for all the plugins I know. It is a lie you can modify a php template. You cannot. Everything really hardcoded, without deep information of the plugin, you can do nothing. Customer approach – On the end I was really disappointed. I had to prepare a websites for the customer by the end of the year. I was messing around with this plugin since I have purchased it and was not able to work on it. On the very end, the support was able to fix it but it was too late for me – I didn’t want to go into another trouble shooting and I needed to go for better plugin ( Amelie ) to deliver the site to the customer in time. I have asked for the refund. The request was rejected bcs of 30 day limit. But as I said, for me the plugin was not working a single day. What a joke. To sum up, please don’t repeat my mistake and never go for this trash plugin. If it would be for free and would work on improvement by troubleshooting with customers, I would have nothing against. But want money for such kind of beta plugin is ridiculous. Go for Amelia or some other working plugins. JM

   Read on wp.org ↗
5. ★★★★★ mindfullashbrow

   3.2y ago

   i’m so impressed with this Plugin. I have tried so many salon booking plug ins and this one is one of the best. The instructions are very easy to use. I have all the functions that I need for my company. Services and bookings are very easy to use and create. The team super supportive, fast answering any of my questions. Even though this is only a free version but its excellent 😍 thank you so much. I would suggest to have the two way, synced for Google calendar (any busy time I can export from Calendar, not only appointments).

   Read on wp.org ↗
6. ★★★★★ Thomas

   3.6y ago

   I tested the plugin for ten days and bought it for a customer. The customer decided against it. I’m still waiting for the refund today. The answer was: we refunded the money thirty days money back is untrue!!

   Read on wp.org ↗
7. ★★★★★ aderjanos

   3.8y ago

   <p>I really liked the plugin! It suited the needs of my client and his hair salon. There’s a responsive booking screen you can add using a shortcode, email templates can be edited, and it’s very customizable in general.<br />Best feature is the two-way Google calendar sync. That really impressed my client and made the whole solution very user/hairdresser friendly. Now if there’s a booking via phone or fb then it’s super easy for them to make a certain time period unavailable to other guests.<br />The Hungarian language file had a couple of bad translations, plus there are a few English strings in the email templates that you have to edit on the server in the files.<br />While the salon I made it for only has one employee/owner I can see how this solution can serve larger businesses.<br />Documentation is excellent.<br />Molte grazie!</p> <p> </p> <p>Update: Still loving it, performing really well. The hairdresser really took a liking to the google calendar workflow. Clients are using it too so it seems that it’s making everyone’s life easier.</p> This topic was modified 3 years, 7 months ago by aderjanos.

   Read on wp.org ↗
8. ★★★★★ 98alim

   3.8y ago

   does not work

   Read on wp.org ↗

37 disclosed vulnerabilities on record for this plugin, 3 still affect the current version.

1. Medium · 4.3 Salon Booking System <= 10.30.19 - Missing Authorization to Authenticated (Subscriber+) Booking Approval Bypass ↗
   2026-08-10 CVE-2026-11887 Client-Side Enforcement of Server-Side Security Affects <= 10.30.19 Patched in 10.30.20
2. Medium · 5.3 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.30.26 - Missing Authorization ↗
   2026-08-07 CVE-2026-66453 Missing Authorization Affects <= 10.30.26 Patched in 10.30.27
3. Medium · 5.3 Salon Booking System – Free Version <= 10.30.33 - Missing Authorization to Unauthenticated Google Calendar Connection Hijack ↗
   2026-08-06 CVE-2026-17023 Missing Authorization Affects <= 10.30.33 No patch available
4. Medium · 5.3 Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Booking Information Disclosure ↗
   2026-08-06 CVE-2026-17022 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 10.30.33 Patched in 10.30.34
5. Medium · 5.3 Salon Booking System – Free Version <= 10.30.33 - Missing Authorization ↗
   2026-08-06 CVE-2026-17021 Missing Authorization Affects <= 10.30.33 Patched in 10.30.34
6. Medium · 4.3 Salon Booking System – Free Version <= 10.31.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Booking PII Disclosure ↗
   2026-08-06 CVE-2026-17020 Authorization Bypass Through User-Controlled Key Affects <= 10.31.0 No patch available
7. High · 8.8 Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameter ↗
   2026-07-09 CVE-2026-15070 Cross-Site Request Forgery (CSRF) Affects <= 10.30.32 Patched in 10.30.33
8. Medium · 5.3 Salon Booking System – Free Version <= 10.30.25 - Missing Authorization ↗
   2026-05-10 CVE-2026-42666 Missing Authorization Affects <= 10.30.25 Patched in 10.30.26
9. High · 7.5 Salon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal ↗
   2026-05-01 CVE-2026-6320 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 10.30.25 Patched in 10.30.26
10. Medium · 5.3 Salon Booking System – Free Version <= 10.30.24 - Unauthenticated Insecure Direct Object Reference ↗
    2026-04-21 CVE-2026-40768 Authorization Bypass Through User-Controlled Key Affects <= 10.30.24 Patched in 10.30.25
11. Low · 3.1 Salon booking system <= 10.30.3 - Authenticated (Subscriber+) Information Exposure ↗
    2026-01-21 CVE-2025-67954 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 10.30.3 Patched in 10.30.4
12. Medium · 4.3 Salon booking system <= 10.30.3 - Cross-Site Request Forgery ↗
    2025-12-07 CVE-2025-66531 Cross-Site Request Forgery (CSRF) Affects <= 10.30.3 Patched in 10.30.4
13. Medium · 5.3 Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Execution ↗
    2025-09-10 CVE-2025-8492 Missing Authorization Affects <= 10.22 Patched in 10.24
14. Medium · 4.3 Salon booking system <= 10.16 - Cross-Site Request Forgery to Arbitrary Post/Page Deletion ↗
    2025-05-15 CVE-2025-47583 Cross-Site Request Forgery (CSRF) Affects <= 10.16 Patched in 10.17
15. Medium · 4.3 Salon booking system <= 10.29.6 - Missing Authorization ↗
    2025-04-04 CVE-2025-32220 Missing Authorization Affects <= 10.29.6 No patch available
16. High · 8.8 Salon booking system <= 10.11 - Authenticated Privilege Escalation ↗
    2025-04-01 CVE-2025-31560 Incorrect Privilege Assignment Affects <= 10.11 Patched in 10.15
17. Medium · 4.3 Salon booking system <= 10.9 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2024-09-25 CVE-2024-47316 Authorization Bypass Through User-Controlled Key Affects <= 10.9 Patched in 10.9.1
18. Medium · 4.4 Salon Booking System <= 10.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-09-13 CVE-2024-9882 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 10.9.3 Patched in 10.9.4
19. Medium · 6.1 Salon booking system <= 10.8.1 - Unauthenticated Open Redirect ↗
    2024-08-16 CVE-2024-43280 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 10.8.1 Patched in 10.9
20. Critical · 9.1 Salon booking system <= 10.7 - Authenticated (Administrator+) SQL Injection ↗
    2024-08-01 CVE-2024-39658 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 10.7 Patched in 10.8
21. Critical · 9.8 Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload ↗
    2024-06-18 CVE-2024-3229 Unrestricted Upload of File with Dangerous Type Affects <= 10.2 Patched in 10.3
22. Medium · 4.3 Salon booking system <= 9.9 - Missing Authorization ↗
    2024-06-07 CVE-2024-4468 Improper Handling of Insufficient Permissions or Privileges Affects <= 9.9 Patched in 10.0
23. Critical · 9.1 Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion ↗
    2024-05-17 CVE-2024-4442 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 9.9 Patched in 10.0
24. Medium · 4.3 Salon booking system <= 9.6.5 - Cross-Site Request Forgery to Settings Update ↗
    2024-04-26 CVE-2024-2429 Cross-Site Request Forgery (CSRF) Affects <= 9.6.5 Patched in 9.6.6
25. Medium · 4.4 Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting via Email Settings ↗
    2024-04-05 CVE-2024-2603 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.6.5 Patched in 9.6.6
26. Medium · 4.4 Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting ↗
    2024-04-05 CVE-2024-2439 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.6.5 Patched in 9.6.6
27. Critical · 10.0 Salon booking system <= 9.5 - Unauthenticated Arbitrary File Upload ↗
    2024-03-28 CVE-2024-30510 Unrestricted Upload of File with Dangerous Type Affects <= 9.5 Patched in 9.5.1
28. High · 7.2 Salon booking system <= 9.6.2 - Unauthenticated Stored Cross-Site Scripting via 'sms_prefix' ↗
    2024-03-27 CVE-2024-2102 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.6.2 Patched in 9.6.3
29. Medium · 5.4 Salon booking system <= 9.6.2 - Authenticated (Customer+) Stored Cross-Site Scripting ↗
    2024-03-27 CVE-2024-2101 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.6.2 Patched in 9.6.3
30. High · 7.2 Salon booking system < 8.7 - Authenticated (Editor+) Privilege Escalation ↗
    2023-11-23 CVE-2023-48319 Improper Privilege Management Affects < 8.7 Patched in 8.7
31. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.4.8 Patched in 8.4.9
32. Medium · 5.4 Salon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customer ↗
    2023-06-27 CVE-2023-3427 Cross-Site Request Forgery (CSRF) Affects <= 8.4.7 Patched in 8.4.8
33. Medium · 6.1 Salon booking system <= 7.9 - Reflected Cross-Site Scripting ↗
    2022-11-08 CVE-2022-43487 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.9 Patched in 7.9.4
34. Medium · 5.3 Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Data Disclosure ↗
    2022-03-21 CVE-2022-0919 Missing Authorization Affects <= 7.6.2 Patched in 7.6.3
35. High · 7.5 Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Information Disclosure ↗
    2022-03-21 CVE-2022-0920 Incorrect Authorization Affects <= 7.6.2 Patched in 7.6.3
36. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 7.6.3 Patched in 7.6.3
37. Medium · 6.1 Salon booking system < 6.3.1 - Stored Cross-Site Scripting ↗
    2021-06-21 CVE-2021-24429 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 6.3.1 Patched in 6.3.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 104 languages, 0 at 90% or more

Plus 80 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-24 3K+ → 2K+ down after 271 days in tier
2. 2025-09-26 4K+ → 3K+ down after 261 days in tier
3. 2025-01-08 5K+ → 4K+ down after 270 days in tier
4. 2024-04-13 6K+ → 5K+ down after 187 days in tier
5. 2023-10-09 7K+ → 6K+ down after 2 days in tier
6. 2023-10-07 6K+ → 7K+ up after 1 days in tier
7. 2023-10-06 7K+ → 6K+ down after 229 days in tier
8. 2023-02-19 8K+ → 7K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress 100K+ installs · 4.8★ · 3 shared tags A
• Simply Schedule Appointments 50K+ installs · 4.9★ · 3 shared tags A
• WPS Bookings for WooCommerce 3K+ installs · 4.3★ · 3 shared tags A
• Advanced Appointment Booking & Scheduling 3K+ installs · 3.6★ · 3 shared tags B
• Easy Booked – Appointment Booking and Scheduling Management System for WordPress 100+ installs · 4.1★ · 3 shared tags C
• Bookify – Appointment Booking & Scheduling for WordPress 10+ installs · 3.6★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for Salon Booking System – Appointment Booking for Salons, Barbershops & Spas into a readme, a review or a deck. It updates itself.

Salon Booking System – Appointment Booking for Salons, Barbershops & Spas: 2K+ active installs, 4.4★ (180 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/salon-booking-system