CVE-2025-5947
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's cookie value prior to logging them in through the service_finder_switch_back() function. This makes it possible for unauthenticated attackers to login as any user including admins.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| aonetheme | Service Finder Bookings | 0 <= 6.0 | affected |
Weaknesses
- CWE-639: CWE-639 Authorization Bypass Through User-Controlled Key
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: partial
CVE Program Container
Additional References
- https://www.vicarius.io/vsociety/posts/cve-2025-5947-detect-wordpress-vulnerability
- https://www.vicarius.io/vsociety/posts/cve-2025-5947-mitigate-wordpress-vulnerability
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/c1fe4f60-d93b-4071-90ae-ac863c17fe19?source=cve
- https://themeforest.net/item/service-finder-service-and-business-listing-wordpress-theme/15208793
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.