Spa and Salon

Spa and Salon has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Spa and Salon has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Spa and Salon is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

4.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Spa and Salon vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-25374

Spa and Salon <= 1.3.2 - Missing Authorization

Read the full analysis

Vulnerability Records

2 records


2026-02-18 00:00	Spa and Salon <= 1.3.2 - Missing Authorization Spa and Salon <= 1.3.2	`CVE-2026-25374`	5.3 Medium	Trương Hữu Phúc (truonghuuphuc)	Yes
2024-04-10 00:00	Spa and Salon <= 1.2.7 - Cross-Site Request Forgery to Notice Dismissal Spa and Salon <= 1.2.7	`CVE-2024-31384`	4.3 Medium	Dhabaleshwar Das	Yes

Showing 1–2 of 2 reports

Latestv1.3.4

Spa and Salon

Author

Rara Themes

4.9(16)

98/100

Last Updated

2026-04-01 (6mo ago)

Active Installs

700+

Downloads

167,657

Requires WP

6.2+

Requires PHP

7.4+

Created

2016-11-15 (10y ago)

Spa and Salon is an elegantly designed theme suitable for spa, salons, beauty, care, girly, hair, health, hospitality, massage, medical, parlor, physiotherapy, wellness, yoga, health blog and various types of business websites. Spa and Salon comes with several features to make a user-friendly, interactive and visually stunning website. Such features include custom menu, attractive Banner with a Call to Action button, service section, testimonial section, about section, Header Phone number display, breadcrumbs, and social media integration. It has three footer area and a right sidebar and includes four custom widgets for the recent posts, popular posts, social media and the featured post. The theme is built on Customizer and it allows you to easily customize your website with live previews. The theme is rigorously tested and optimized for speed and faster page load time and has a secure and clean code. The theme is also translation ready. Designed with visitor engagement in mind, Spa and Salon helps you to easily and intuitively create professional and appealing websites. Check demo at https://rarathemes.com/previews/?theme=spa-and-salon and documentation at https://docs.rarathemes.com/docs/spa-and-salon/. Read theme details at https://rarathemes.com/wordpress-themes/spa-and-salon/ and get free support at https://rarathemes.com/support-ticket/.