Salon Booking System – Appointment Booking for Salons, Barbershops & Spas

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

263 searches this plugin appeared in over the last 90 days, 20 listed. 212 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 4 months ago; a band this size takes about a year or more to cross, which places it about 64% of the way through.

1. ★★★★★ magnelovold

   4mo ago

   I’ve been using Salon Booking to manage my spa business for more than five years, and I can honestly say it is one of the most complete appointment booking plugins available for WordPress. The plugin is powerful, flexible and reliable, and it has allowed us to build a professional online booking experience for our customers. Throughout these years it has become an essential part of our daily business. One thing I especially appreciate is the team’s responsiveness. During the Norwegian localization process I translated more than 2,600 strings, tested several versions in a live environment, and reported translation and localization issues. The Salon Booking Team not only accepted the translations but also implemented several suggestions that improved the localization system itself. That level of support and willingness to improve the product is something you don’t see very often. The plugin offers an impressive number of features while still allowing customization through hooks, filters and small MU-plugins when needed. This has made it possible for us to tailor the booking experience to our business without modifying the core plugin. No software is perfect, and I have suggested a few additional improvements for future releases, but the team has always been open to feedback and continues to improve the plugin. If you’re looking for a professional, feature-rich and reliable appointment booking system for WordPress, I can highly recommend Salon Booking. Thank you, Salon Booking Team, for creating such an excellent plugin and for your outstanding support over the years.

   Read on wp.org ↗
2. ★★★★★ lukafuka

   8mo ago

   I tried almost all the most popular booking plugins, and this one offers the best functionality in its free version. You have the possibility to set everything very granularly. The only con is that it has a lot of bugs, but the developers react very fast with fixes.

   Read on wp.org ↗
3. ★★★★★ idunatek

   1.0y ago

   The plugin offers everything you would expect from a booking plugin, and the price for the Pro version is really fair, but the best thing was the direct support. The developers even made a change to the code to cover my specific use case.

   Read on wp.org ↗
4. ★★★★★ kordiler

   2.8y ago

   In general, I cannot recommend this plugin at all. If you need a working plugin go for Amelia, really solid plugin offering everything you could possibly need. Back to Salon, sorry to say but for business websites use it is a trash. To be more specific I have purchased Pro version but still suffered: Poor support Salon seems to be a beta-plugin. The backend design, logic of the setting etc. is very week. For me, it took weeks before guy from support could help me to finally make the plugin work. The documentation is chaotic, doesn’t include understandable instructions. Video tutorials are ridiculous – music on the background ? Seriously ? On top of that, I doubt there is more then 2 people in the background. It is more or less one man show. What you can possible expect from broken plugin with 0 support… Front end seems to be fine but… Front end in demos looks nice, it take some time to understand how categories are working. But it give your really low level of adjustability in real page integration it is very tough to properly fit it into your stilling. Resolution on 4K screen – disaster. Short code implementation – some nice block editing ??? Forget… Adjustability – there is basically nothing you can change. I really missed customization of the email notification. You have a template, with four tags. You can only change the text…no variables. Why you don’t allow user to insert a HTLM code – it is standard for all the plugins I know. It is a lie you can modify a php template. You cannot. Everything really hardcoded, without deep information of the plugin, you can do nothing. Customer approach – On the end I was really disappointed. I had to prepare a websites for the customer by the end of the year. I was messing around with this plugin since I have purchased it and was not able to work on it. On the very end, the support was able to fix it but it was too late for me – I didn’t want to go into another trouble shooting and I needed to go for better plugin ( Amelie ) to deliver the site to the customer in time. I have asked for the refund. The request was rejected bcs of 30 day limit. But as I said, for me the plugin was not working a single day. What a joke. To sum up, please don’t repeat my mistake and never go for this trash plugin. If it would be for free and would work on improvement by troubleshooting with customers, I would have nothing against. But want money for such kind of beta plugin is ridiculous. Go for Amelia or some other working plugins. JM

   Read on wp.org ↗
5. ★★★★★ mindfullashbrow

   3.4y ago

   i’m so impressed with this Plugin. I have tried so many salon booking plug ins and this one is one of the best. The instructions are very easy to use. I have all the functions that I need for my company. Services and bookings are very easy to use and create. The team super supportive, fast answering any of my questions. Even though this is only a free version but its excellent 😍 thank you so much. I would suggest to have the two way, synced for Google calendar (any busy time I can export from Calendar, not only appointments).

   Read on wp.org ↗
6. ★★★★★ Thomas

   3.8y ago

   I tested the plugin for ten days and bought it for a customer. The customer decided against it. I’m still waiting for the refund today. The answer was: we refunded the money thirty days money back is untrue!!

   Read on wp.org ↗
7. ★★★★★ aderjanos

   4.0y ago

   <p>I really liked the plugin! It suited the needs of my client and his hair salon. There’s a responsive booking screen you can add using a shortcode, email templates can be edited, and it’s very customizable in general.<br />Best feature is the two-way Google calendar sync. That really impressed my client and made the whole solution very user/hairdresser friendly. Now if there’s a booking via phone or fb then it’s super easy for them to make a certain time period unavailable to other guests.<br />The Hungarian language file had a couple of bad translations, plus there are a few English strings in the email templates that you have to edit on the server in the files.<br />While the salon I made it for only has one employee/owner I can see how this solution can serve larger businesses.<br />Documentation is excellent.<br />Molte grazie!</p> <p> </p> <p>Update: Still loving it, performing really well. The hairdresser really took a liking to the google calendar workflow. Clients are using it too so it seems that it’s making everyone’s life easier.</p> This topic was modified 3 years, 7 months ago by aderjanos.

   Read on wp.org ↗
8. ★★★★★ 98alim

   4.0y ago

   does not work

   Read on wp.org ↗

2 open vulnerabilities affect the current version (10.31.13). 48 of 50 disclosed are patched.

1. Patched Medium · 5.3 Salon Booking System <= 10.31.10 - Unauthenticated Negative Booking Total Creation ↗
   2026-10-16 CVE-2026-110034 Client-Side Enforcement of Server-Side Security Affects <= 10.31.10 Patched in 10.31.11
2. Patched Medium · 4.3 Salon Booking System <= 10.31.10 - Missing Authorization ↗
   2026-10-16 CVE-2026-110032 Incorrect Authorization Affects <= 10.31.10 Patched in 10.31.11
3. Patched Medium · 6.4 Salon Booking System <= 10.31.10 - Authenticated (Salon Staff+) Stored Cross-Site Scripting ↗
   2026-10-16 CVE-2026-110033 Improper Neutralization of Input During Web Page Generation Affects <= 10.31.10 Patched in 10.31.11
4. Patched High · 8.8 Salon Booking System 10.17 - 10.31.10 - Authenticated (Salon Staff+) Privilege Escalation ↗
   2026-10-16 CVE-2026-110031 Improper Privilege Management Affects 10.17 - 10.31.10 Patched in 10.31.11
5. Patched Medium · 4.3 Salon Booking System <= 10.31.10 - Missing Authorization ↗
   2026-10-16 CVE-2026-110035 Missing Authorization Affects <= 10.31.10 Patched in 10.31.11
6. Patched High · 7.2 Salon Booking System <= 10.31.9 - Unauthenticated Stored Cross-Site Scripting via Custom Checkout Field (Html/File Type) via Public Booking AJAX ↗
   2026-10-15 CVE-2026-109232 Improper Neutralization of Input During Web Page Generation Affects <= 10.31.9 Patched in 10.31.10
7. Patched Medium · 4.3 Salon Booking System <= 10.31.2 - Authenticated (Subscriber+) Information Exposure ↗
   2026-10-14 CVE-2026-110012 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 10.31.2 Patched in 10.31.3
8. Patched Medium · 6.5 Salon Booking System <= 10.31.8 - Insufficient Authorization to Booking API Access ↗
   2026-10-14 CVE-2026-110013 Improper Authentication Affects <= 10.31.8 Patched in 10.31.9
9. Patched Medium · 5.3 Salon Booking System <= 10.31.8 - Missing Authorization ↗
   2026-10-14 CVE-2026-110014 Missing Authorization Affects <= 10.31.8 Patched in 10.31.9
10. Patched Medium · 4.3 Salon Booking System <= 10.31.8 - Cross-Site Request Forgery ↗
    2026-10-14 CVE-2026-110015 Cross-Site Request Forgery Affects <= 10.31.8 Patched in 10.31.9
11. Patched High · 7.3 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.7 - Unauthenticated Privilege Escalation ↗
    2026-10-05 CVE-2026-105070 Improper Privilege Management Affects <= 10.31.7 Patched in 10.31.9
12. Patched High · 7.2 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.5 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-10-04 CVE-2026-94668 Improper Neutralization of Input During Web Page Generation Affects <= 10.31.5 Patched in 10.31.6
13. Open Medium · 5.3 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.31.5 - Missing Authorization ↗
    2026-09-08 CVE-2026-81793 Missing Authorization Affects <= 10.31.5 No patch available
14. Patched Medium · 4.3 Salon Booking System <= 10.30.19 - Missing Authorization to Authenticated (Subscriber+) Booking Approval Bypass ↗
    2026-08-10 CVE-2026-11887 Client-Side Enforcement of Server-Side Security Affects <= 10.30.19 Patched in 10.30.20
15. Patched Medium · 5.3 Salon Booking System – Appointment Booking for Salons, Barbershops & Spas <= 10.30.26 - Missing Authorization ↗
    2026-08-07 CVE-2026-66453 Missing Authorization Affects <= 10.30.26 Patched in 10.30.27
16. Patched Medium · 5.3 Salon Booking System – Free Version < 10.31.3 - Missing Authorization to Unauthenticated Google Calendar Connection Hijack ↗
    2026-08-06 CVE-2026-17023 Missing Authorization Affects < 10.31.3 Patched in 10.31.3
17. Patched Medium · 5.3 Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Booking Information Disclosure ↗
    2026-08-06 CVE-2026-17022 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 10.30.33 Patched in 10.30.34
18. Patched Medium · 5.3 Salon Booking System – Free Version <= 10.30.33 - Missing Authorization ↗
    2026-08-06 CVE-2026-17021 Missing Authorization Affects <= 10.30.33 Patched in 10.30.34
19. Patched Medium · 4.3 Salon Booking System – Free Version < 10.31.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Booking PII Disclosure ↗
    2026-08-06 CVE-2026-17020 Authorization Bypass Through User-Controlled Key Affects < 10.31.3 Patched in 10.31.3
20. Patched High · 8.8 Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' Parameter ↗
    2026-07-09 CVE-2026-15070 Cross-Site Request Forgery Affects <= 10.30.32 Patched in 10.30.33
21. Patched Medium · 5.3 Salon Booking System – Free Version <= 10.30.25 - Missing Authorization ↗
    2026-05-10 CVE-2026-42666 Missing Authorization Affects <= 10.30.25 Patched in 10.30.26
22. Patched High · 7.5 Salon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal ↗
    2026-05-01 CVE-2026-6320 Improper Limitation of a Pathname to a Restricted Directory Affects <= 10.30.25 Patched in 10.30.26
23. Patched Medium · 5.3 Salon Booking System – Free Version <= 10.30.24 - Unauthenticated Insecure Direct Object Reference ↗
    2026-04-21 CVE-2026-40768 Authorization Bypass Through User-Controlled Key Affects <= 10.30.24 Patched in 10.30.25
24. Patched Low · 3.1 Salon booking system <= 10.30.3 - Authenticated (Subscriber+) Information Exposure ↗
    2026-01-21 CVE-2025-67954 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 10.30.3 Patched in 10.30.4
25. Patched Medium · 4.3 Salon booking system <= 10.30.3 - Cross-Site Request Forgery ↗
    2025-12-07 CVE-2025-66531 Cross-Site Request Forgery Affects <= 10.30.3 Patched in 10.30.4
26. Patched Medium · 5.3 Salon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions Execution ↗
    2025-09-10 CVE-2025-8492 Missing Authorization Affects <= 10.22 Patched in 10.24
27. Patched Medium · 4.3 Salon booking system <= 10.16 - Cross-Site Request Forgery to Arbitrary Post/Page Deletion ↗
    2025-05-15 CVE-2025-47583 Cross-Site Request Forgery Affects <= 10.16 Patched in 10.17
28. Open Medium · 4.3 Salon booking system <= 10.29.6 - Missing Authorization ↗
    2025-04-04 CVE-2025-32220 Missing Authorization Affects <= 10.29.6 No patch available
29. Patched High · 8.8 Salon booking system <= 10.11 - Authenticated Privilege Escalation ↗
    2025-04-01 CVE-2025-31560 Incorrect Privilege Assignment Affects <= 10.11 Patched in 10.15
30. Patched Medium · 4.3 Salon booking system <= 10.9 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2024-09-25 CVE-2024-47316 Authorization Bypass Through User-Controlled Key Affects <= 10.9 Patched in 10.9.1
31. Patched Medium · 4.4 Salon Booking System <= 10.9.3 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-09-13 CVE-2024-9882 Improper Neutralization of Input During Web Page Generation Affects <= 10.9.3 Patched in 10.9.4
32. Patched Medium · 6.1 Salon booking system <= 10.8.1 - Unauthenticated Open Redirect ↗
    2024-08-16 CVE-2024-43280 URL Redirection to Untrusted Site Affects <= 10.8.1 Patched in 10.9
33. Patched Critical · 9.1 Salon booking system <= 10.7 - Authenticated (Administrator+) SQL Injection ↗
    2024-08-01 CVE-2024-39658 Improper Neutralization of Special Elements used in an SQL Command Affects <= 10.7 Patched in 10.8
34. Patched Critical · 9.8 Salon Booking System <= 10.2 - Unauthenticated Arbitrary File Upload ↗
    2024-06-18 CVE-2024-3229 Unrestricted Upload of File with Dangerous Type Affects <= 10.2 Patched in 10.3
35. Patched Medium · 4.3 Salon booking system <= 9.9 - Missing Authorization ↗
    2024-06-07 CVE-2024-4468 Improper Handling of Insufficient Permissions or Privileges Affects <= 9.9 Patched in 10.0
36. Patched Critical · 9.1 Salon booking system <= 9.9 - Unauthenticated Arbitrary File Deletion ↗
    2024-05-17 CVE-2024-4442 Improper Limitation of a Pathname to a Restricted Directory Affects <= 9.9 Patched in 10.0
37. Patched Medium · 4.3 Salon booking system <= 9.6.5 - Cross-Site Request Forgery to Settings Update ↗
    2024-04-26 CVE-2024-2429 Cross-Site Request Forgery Affects <= 9.6.5 Patched in 9.6.6
38. Patched Medium · 4.4 Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting via Email Settings ↗
    2024-04-05 CVE-2024-2603 Improper Neutralization of Input During Web Page Generation Affects <= 9.6.5 Patched in 9.6.6
39. Patched Medium · 4.4 Salon booking system <= 9.6.5 - Authenticated (Editor+) Stored Cross-Site Scripting ↗
    2024-04-05 CVE-2024-2439 Improper Neutralization of Input During Web Page Generation Affects <= 9.6.5 Patched in 9.6.6
40. Patched Critical · 10.0 Salon booking system <= 9.5 - Unauthenticated Arbitrary File Upload ↗
    2024-03-28 CVE-2024-30510 Unrestricted Upload of File with Dangerous Type Affects <= 9.5 Patched in 9.5.1
41. Patched High · 7.2 Salon booking system <= 9.6.2 - Unauthenticated Stored Cross-Site Scripting via 'sms_prefix' ↗
    2024-03-27 CVE-2024-2102 Improper Neutralization of Input During Web Page Generation Affects <= 9.6.2 Patched in 9.6.3
42. Patched Medium · 5.4 Salon booking system <= 9.6.2 - Authenticated (Customer+) Stored Cross-Site Scripting ↗
    2024-03-27 CVE-2024-2101 Improper Neutralization of Input During Web Page Generation Affects <= 9.6.2 Patched in 9.6.3
43. Patched High · 7.2 Salon booking system < 8.7 - Authenticated (Editor+) Privilege Escalation ↗
    2023-11-23 CVE-2023-48319 Improper Privilege Management Affects < 8.7 Patched in 8.7
44. Patched Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation Affects <= 8.4.8 Patched in 8.4.9
45. Patched Medium · 5.4 Salon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customer ↗
    2023-06-27 CVE-2023-3427 Cross-Site Request Forgery Affects <= 8.4.7 Patched in 8.4.8
46. Patched Medium · 6.1 Salon booking system <= 7.9 - Reflected Cross-Site Scripting ↗
    2022-11-08 CVE-2022-43487 Improper Neutralization of Input During Web Page Generation Affects <= 7.9 Patched in 7.9.4
47. Patched Medium · 5.3 Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Data Disclosure ↗
    2022-03-21 CVE-2022-0919 Missing Authorization Affects <= 7.6.2 Patched in 7.6.3
48. Patched High · 7.5 Salon Booking System and Salon Booking System Pro <= 7.6.2 - Sensitive Information Disclosure ↗
    2022-03-21 CVE-2022-0920 Incorrect Authorization Affects <= 7.6.2 Patched in 7.6.3
49. Patched Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 7.6.3 Patched in 7.6.3
50. Patched Medium · 6.1 Salon booking system < 6.3.1 - Stored Cross-Site Scripting ↗
    2021-06-21 CVE-2021-24429 Improper Neutralization of Input During Web Page Generation Affects < 6.3.1 Patched in 6.3.1

Translated into 102 languages, 1 at 90% or more

Plus 78 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-24 3K+ → 2K+ down after 271 days in tier
2. 2025-09-26 4K+ → 3K+ down after 261 days in tier
3. 2025-01-08 5K+ → 4K+ down after 270 days in tier
4. 2024-04-13 6K+ → 5K+ down after 187 days in tier
5. 2023-10-09 7K+ → 6K+ down after 2 days in tier
6. 2023-10-07 6K+ → 7K+ up after 1 days in tier
7. 2023-10-06 7K+ → 6K+ down after 229 days in tier
8. 2023-02-19 8K+ → 7K+ down after 616 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Salon Booking System – Appointment Booking for Salons, Barbershops & Spas into a readme, a review or a deck. It updates itself.

Salon Booking System – Appointment Booking for Salons, Barbershops & Spas: 2K+ active installs, 4.4★ (187 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/salon-booking-system