108 matches found
Service Finder Bookings - Authentication Bypass
Service Finder Bookings WordPress plugin = 6.0 contains a privilege escalation caused by improper validation of user cookie in servicefinderswitchback function, letting unauthenticated attackers login as any user including admins. id: CVE-2025-5947 info: name: Service Finder Bookings -...
CVE-2025-5947_Exploit
🔍 WordPress Plugin Exploit — Service Finder sf-booking Overview The Service Finder plugin is a booking and service management system for WordPress. Because of its popularity and complexity, some versions have had security issues related to unauthenticated AJAX endpoints or improper access control...
CVE-2025-5947
CVE-2025-5947 CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 Exploit CVE-2025-5947 Exploit - Service Finder Bookings Exploit tool for authentication bypass vulnerability in WordPress Service Finder Bookings ≤ 6.0 plugin 📋 Table of Contents About the Vulnerability Technical Details...
CVE-2026-28161
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
CVE-2026-28159
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
CVE-2026-28161
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
CVE-2026-28161 WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
CVE-2026-28161 WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
EUVD-2026-57953
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
CVE-2026-28161
CVE-2026-28161 affects the WordPress Service Finder Booking plugin
EUVD-2026-57952
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
CVE-2026-28159
CVE-2026-28159 affects the WordPress plugin “Service Finder Booking” up to version 6.2. The vulnerability is described as Broken Access Control, with CVSS3.1 base metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (medium). Impact: Unauthorized access could affect availability of the service or booking...
CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
CVE-2026-28159
Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...
WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Service Finder Booking versions = 6.2...
WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Jamaal ahmed in WordPress Plugin Service Finder Booking versions = 6.2...
PT-2026-71519
Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...
