What’s Vulnerable › Products

Aonetheme Service Finder Booking vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Aonetheme Service Finder Booking version is affected

Latest Aonetheme Service Finder Booking vulnerabilities

• CVE-2026-28161 — WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability (CVSS 8.8)
• CVE-2026-28159 — WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2025-23970 — WordPress Service Finder Booking plugin <= 6.1 - Privilege Escalation Vulnerability (CVSS 9.8)