CVE-2026-28161

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2026-28159

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28161

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2026-28161 WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2026-28161 WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2026-28161

CVE-2026-28161 affects the WordPress Service Finder Booking plugin

EUVD-2026-57953

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2026-28159

CVE-2026-28159 affects the WordPress plugin “Service Finder Booking” up to version 6.2. The vulnerability is described as Broken Access Control, with CVSS3.1 base metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (medium). Impact: Unauthorized access could affect availability of the service or booking...

CVE-2026-28159

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

EUVD-2026-57952

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Service Finder Booking versions = 6.2...

WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jamaal ahmed in WordPress Plugin Service Finder Booking versions = 6.2...

CVE-2026-28159: Missing Authorization

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

PT-2026-71519

Name of the Vulnerable Software and Affected Versions Service Finder Booking versions prior to 6.3 Description The Service Finder Bookings plugin for WordPress allows authenticated users with Subscriber-level access or higher to elevate their privileges to the administrator level. Recommendations...

PT-2026-71518

Name of the Vulnerable Software and Affected Versions Service Finder Booking versions prior to 6.3 Description The Service Finder Booking plugin for WordPress contains a broken access control issue. A missing capability check in a function allows authenticated users with subscriber-level...

CVE-2026-28161: Incorrect Privilege Assignment

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2025-23970

Incorrect Privilege Assignment vulnerability in aonetheme Service Finder Booking sf-booking allows Privilege Escalation.This issue affects Service Finder Booking: from n/a through = 6.1...

WordPress Service Finder Bookings plugin <= 6.0 - Authentication Bypass via User Switch Cookie vulnerability

Authentication Bypass via User Switch Cookie vulnerability discovered by Foxyyy in WordPress Plugin Service Finder Booking versions = 6.0...