Aonetheme Service Finder Bookings vulnerabilities

CVE-2025-5947 [CRITICAL] CWE-639 CVE-2025-5947: The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentic The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's cookie value prior to logging them in through the service_finder_switch_back() function. This makes it possible for unauthenticated atta

CVE-2024-13442 [CRITICAL] CWE-288 CVE-2024-13442: The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account t The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.0. This is due to the plugin not properly validating a user's identity prior to (1) performing a post-booking auto-login or (2) updating their profile details (e.g. password). This makes it possible fo

CVE-2025-5948 [CRITICAL] CWE-639 CVE-2025-5948: The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account t The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's identity prior to claiming a business when using the claim_business AJAX action. This makes it possible for unauthenticated attackers to logi

CVE-2025-2470 [CRITICAL] CWE-266 CVE-2025-2470: The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Boa The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board WordPress Theme, is vulnerable to privilege escalation in all versions up to, and including, 5.1. This is due to a lack of restriction on user role in the 'nsl_registration_store_extra_input' function. This makes it possible for unauthenticated att

CVE-2025-6574 [HIGH] CWE-639 CVE-2025-6574: The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account t The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and excluding, 6.1. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with subscriber-level access and above,

CVE-2025-5949 [HIGH] CWE-639 CVE-2025-5949: The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account t The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's identity prior to processing a password change request. This makes it possible for authenticated attackers with subscriber access or higher to re