WordPress security by component

SpaLab | Beauty Salon WordPress Theme

Theme description

SpaLab | Beauty Salon WordPress Theme is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 02, 2026; the highest CVE/CNA score is 7.1.

Theme slug: spalab

Latest vulnerability

CVE-2025-69154: SpaLab | Beauty Salon WordPress Theme: Cross-site scripting

SpaLab | Beauty Salon WordPress Theme is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 6.7.

PublishedJul 02, 2026

Known safe version> 6.7

		Safe version
Jul 02, 2026	CVE-2025-69154 SpaLab \| Beauty Salon WordPress Theme: Cross-site scripting SpaLab \| Beauty Salon WordPress Theme is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 6.7.	> 6.7	CVE7.1 NVDPending