CVE-2025-5947_Exploit

🔍 Explotación de Plugin de WordPress — Service Finder sf-booking Resumen El plugin Service Finder es un sistema de reservas y gestión de servicios para WordPress. Debido a su popularidad y complejidad, algunas versiones han tenido problemas de seguridad relacionados con endpoints AJAX no...

CVE-2025-5947

CVE-2025-5947 CVE-2025-5947 WordPress Service Finder Bookings ≤ 6.0 Exploit CVE-2025-5947 Exploit - Service Finder Bookings Herramienta de exploit para la vulnerabilidad de omisión de autenticación en el plugin de WordPress Service Finder Bookings ≤ 6.0 📋 Índice Acerca de la Vulnerabilidad Detall...

Service Finder Bookings - Authentication Bypass

Service Finder Bookings WordPress plugin = 6.0 contains a privilege escalation caused by improper validation of user cookie in servicefinderswitchback function, letting unauthenticated attackers login as any user including admins. id: CVE-2025-5947 info: name: Service Finder Bookings -...

CVE-2026-28159

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28161

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2026-28161

CVE-2026-28161 affects the WordPress Service Finder Booking plugin

CVE-2026-28161 WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2026-28161

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2026-28161 WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

EUVD-2026-57953

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28159

CVE-2026-28159 affects the WordPress plugin “Service Finder Booking” up to version 6.2. The vulnerability is described as Broken Access Control, with CVSS3.1 base metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (medium). Impact: Unauthorized access could affect availability of the service or booking...

CVE-2026-28159

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

EUVD-2026-57952

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

CVE-2026-28159 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Service Finder Booking versions = 6.2...

WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jamaal ahmed in WordPress Plugin Service Finder Booking versions = 6.2...

CVE-2026-28161: Incorrect Privilege Assignment

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...

CVE-2026-28159: Missing Authorization

Subscriber Broken Access Control in Service Finder Booking = 6.2 versions...

PT-2026-71519

Subscriber Privilege Escalation in Service Finder Booking = 6.2 versions...