TI-2026-22501 CVE-2026-28161 · GHSA-x3q9-w99r-j42c
WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability
Priority MEDIUM 40
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.
Vulnerabilities
11 records
TI-2026-22500 CVE-2026-28159 · GHSA-xx5v-q5rj-f4pr
WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability
Priority LOW 29
Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions.
TI-2025-05972 CVE-2025-6574 · GHSA-rh5q-2gvc-hr3m
Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Priority MEDIUM 40
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and excluding, 6.1.
TI-2025-05374 CVE-2025-5949 · GHSA-4gj5-pmgw-233c
Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password
Priority LOW 38
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.
TI-2025-05373 CVE-2025-5948 · GHSA-qqp4-w394-8p76
Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business
Priority MEDIUM 49
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.
TI-2025-05379 CVE-2025-5955 · GHSA-439q-g9x9-rr2v
Service Finder SMS System <= 2.0.0 - Authentication Bypass
Priority LOW 38
The Service Finder SMS System plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.0.
TI-2025-05372 CVE-2025-5947 · GHSA-x2xx-4qhp-2vqx
Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
Priority MEDIUM 56
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0.
TI-2025-05378 CVE-2025-5954 · GHSA-8qcm-792h-prf3
Service Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation
Priority MEDIUM 42
The Service Finder SMS System plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0.
TI-2025-17737 CVE-2025-23970 · GHSA-pr95-fqhx-h72h
WordPress Service Finder Booking plugin <= 6.1 - Privilege Escalation Vulnerability
Priority MEDIUM 50
Incorrect Privilege Assignment vulnerability in aonetheme Service Finder Booking sf-booking allows Privilege Escalation.This issue affects Service Finder Booking: from n/a through <= 6.1.
TI-2025-02145 CVE-2025-2470 · GHSA-mcrr-9jjf-26v7
Service Finder Bookings <= 5.1 - Unauthenticated Privilege Escalation via 'nsl_registration_store_extra_input'
Priority MEDIUM 49
The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board WordPress Theme, is vulnerable to privilege escalation in all versions up to, and including, 5.1.
TI-2024-12483 CVE-2024-13442 · GHSA-96pc-32h7-wj35
Service Finder Bookings <= 5.0 - Unauthenticated Privilege Escalation via Account Takeover
Priority MEDIUM 49
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.0.