Salon Booking 是 wordpresschef 开发、CodeCanyon 在售的专业 WordPress 预约插件，核心面向美发沙龙、理发店、美容中心、SPA、理疗馆、健身场馆等线下服务商家，内置完整后台日历（日月周三种视图）、多渠道短信 / 邮件 / WhatsApp 通知系统、PayPal/Stripe 等主流支付接口、双向谷歌日历同步、客户档案库、营收数据报表与高级优惠券折扣体系，同时提供移动端管理 Web 端、自定义预约表单字段、多分店扩展插件、RESTful 开放 API，支持数十种语言本地化，支持访客免注册下单、定金预约、未付款订单自动取消等实用规则，大幅简化门店预约排班、客户跟进与营收统计工作。适配全品类美业门店、功能全覆盖的 WordPress 付费预约插件，排班通知支付报表一体化，中小型沙龙开店首选预约工具。
「官方网址」https://www.salonbookingsystem.com/
「官方购买」https://codecanyon.net/item/salon-booking-wordpress-plugin/15963435
解压密码
版本更新
2026-07-30
* Security fix: enforced booking ownership on the single-booking REST endpoint to prevent authenticated users from reading other customers' booking details (IDOR) — thanks to Muni Nitish Kumar Yaddala
* Security fix: added nonce and secure per-booking token validation to the tip and discount AJAX actions to prevent unauthenticated tampering with bookings — thanks to Muni Nitish Kumar Yaddala
* Security fix: enforced the per-booking secure token on the booking wizard confirmation/summary steps to prevent unauthenticated disclosure of booking information — thanks to Usama Arshad
* Security fix: added OAuth state validation, an admin capability check and removal of the unauthenticated callback on the Google Calendar connection to prevent connection hijacking; removed the shared hardcoded OAuth credentials (each site must now configure its own) — thanks to Daniel Dhaniswara
* Security fix: enforced booking ownership on the single-booking REST endpoint to prevent authenticated users from reading other customers' booking details (IDOR) — thanks to Muni Nitish Kumar Yaddala
* Security fix: added nonce and secure per-booking token validation to the tip and discount AJAX actions to prevent unauthenticated tampering with bookings — thanks to Muni Nitish Kumar Yaddala
* Security fix: enforced the per-booking secure token on the booking wizard confirmation/summary steps to prevent unauthenticated disclosure of booking information — thanks to Usama Arshad
* Security fix: added OAuth state validation, an admin capability check and removal of the unauthenticated callback on the Google Calendar connection to prevent connection hijacking; removed the shared hardcoded OAuth credentials (each site must now configure its own) — thanks to Daniel Dhaniswara
#SalonBooking 插件 #WordPress 美业预约插件 #理发店在线预约系统 #SPA 预约管理插件 #CodeCanyon 预约插件 #美容店 WordPress 预约工具 #沙龙客户管理插件 #美发店排班日历插件 #WordPress 支付预约插件 #双向谷歌日历同步预约插件
免责声明：
本站内容仅供学习交流使用，请勿商用，请勿传播 ！！！
本站所有内容收集于互联网，不直接提供下载服务 ！！！
本站发布的内容如果侵犯了您的权益，请联系删除 ！！！
本站内容仅供学习交流使用，请勿商用，请勿传播 ！！！
本站所有内容收集于互联网，不直接提供下载服务 ！！！
本站发布的内容如果侵犯了您的权益，请联系删除 ！！！