CVE-2024-13442 Service Finder Bookings <= 5.0 - Unauthenticated Privilege Escalation via Account Takeover

The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.0. This is due to the plugin not properly validating a user's identity prior to 1 performing a post-booking auto-login or 2 updating their profile...

WordPress plugin Service Finder Bookings 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-11674

Name of the Vulnerable Software and Affected Versions Service Finder Bookings plugin for WordPress version 5.0 and earlier Description The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover. This is due to the plugin not properly validating a...

CVE-2024-13442: Authentication Bypass Using an Alternate Path or Channel

The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.0. This is due to the plugin not properly validating a user's identity prior to 1 performing a post-booking auto-login or 2 updating their profile...

WordPress Service Finder Bookings plugin <= 5.0 - Unauthenticated Privilege Escalation via Account Takeover vulnerability

Unauthenticated Privilege Escalation via Account Takeover vulnerability discovered by Tonn in WordPress Plugin Service Finder Booking versions = 5.0...

CVE-2024-12146

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM New System allows SQL Injection. This issue affects Finder ERP/CRM New System: before 18.12.2024...

CVE-2024-12144

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...

CVE-2024-12146

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM New System allows SQL Injection. This issue affects Finder ERP/CRM New System: before 18.12.2024...

CVE-2024-12146

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM New System allows SQL Injection. This issue affects Finder ERP/CRM New System: before 18.12.2024...

CVE-2024-12144

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...

CVE-2024-12144

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...

CVE-2024-12146 SQLi in Finder Fire Safety's Finder ERP/CRM (New System)

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM New System allows SQL Injection.This issue affects Finder ERP/CRM New System: before 18.12.2024...

CVE-2024-12146

The CVE-2024-12146 entry describes an SQL Injection vulnerability in Finder Fire Safety Finder ERP/CRM (New System), caused by improper neutralization of special elements in SQL commands. Affected software is Finder ERP/CRM (New System) prior to version 18.12.2024. The issue enables potential dat...

CVE-2024-12146 SQLi in Finder Fire Safety's Finder ERP/CRM (New System)

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM New System allows SQL Injection. This issue affects Finder ERP/CRM New System: before 18.12.2024...

CVE-2024-12144

CVE-2024-12144 affects Finder ERP/CRM (Old System) and is caused by improper neutralization of special elements in SQL commands, enabling SQL injection. The issue applies to Finder ERP/CRM (Old System) versions before 18.12.2024. The description documents a high-severity impact (C/H/I/A) with a n...

CVE-2024-12144 SQLi in Finder Fire Safety's Finder ERP/CRM (Old System)

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...

CVE-2024-12144 SQLi in Finder Fire Safety's Finder ERP/CRM (Old System)

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...

Finder ERP SQL注入漏洞

Finder ERP is an enterprise resource planning software from Finder Turkey. An SQL injection vulnerability exists in Finder ERP versions prior to 18.12.2024, which stems from improper validation of input syntax correctness and could lead to SQL injection...

Finder ERP SQL注入漏洞

Finder ERP is an enterprise resource planning software from Finder Turkey. An SQL injection vulnerability exists in Finder ERP versions prior to 18.12.2024, which stems from improper neutralization of special elements in SQL commands and could lead to SQL injection...

PT-2025-9922

Name of the Vulnerable Software and Affected Versions Finder ERP/CRM New System versions prior to 18.12.2024 Description The issue is related to improper validation of syntactic correctness of input, allowing SQL Injection. Recommendations For versions prior to 18.12.2024, update to a version...