Skip to content
OpenAdvisories

Vendor

Aonetheme

11 known vulnerabilities.

Products

Service Finder Bookings 6 Service Finder Booking 3 Service Finder SMS System 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-5947 Public exploit Scanner template

    Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie

    The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's cookie value prior to logging them in throug…

    Aonetheme Service Finder Bookings Web / CMS