CVE-2025-5947

The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's cookie value prior to logging them in through the service_finder_switch_back() function. This makes it possible for unauthenticated attackers to login as any user including admins.

The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's cookie value prior to logging them in through the service_finder_switch_back() function. This makes it possible for unauthenticated attackers to login as any user including admins.

El complemento Service Finder Bookings para WordPress es vulnerable a la escalada de privilegios mediante la omisión de autenticación en todas las versiones hasta la 6.0 incluida. Esto se debe a que el complemento no valida correctamente el valor de la cookie del usuario antes de iniciar sesión mediante la función service_finder_switch_back(). Esto permite que atacantes no autenticados inicien sesión como cualquier usuario, incluidos los administradores.