What’s Vulnerable › Products
aonetheme Service Finder Bookings vulnerabilities
6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your aonetheme Service Finder Bookings version is affected
Latest aonetheme Service Finder Bookings vulnerabilities
- CVE-2025-6574 — Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover (CVSS 8.8)
- CVE-2025-5949 — Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password (CVSS 8.8)
- CVE-2025-5948 — Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business (CVSS 9.8)
- CVE-2025-5947 — Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie (CVSS 9.8)
- CVE-2025-2470 — Service Finder Bookings <= 5.1 - Unauthenticated Privilege Escalation via 'nsl_registration_store_extra_input' (CVSS 9.8)
- CVE-2024-13442 — Service Finder Bookings <= 5.0 - Unauthenticated Privilege Escalation via Account Takeover (CVSS 9.8)