Aonetheme vulnerabilities

Products

• Service Finder Bookings 6
• Service Finder Booking 3
• Service Finder Sms System 2

Newest

• aonetheme service finder booking WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability CVE-2026-28161 8.8 HighAugust 13, 2026
• aonetheme service finder booking WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability CVE-2026-28159 6.5 MediumAugust 13, 2026
• aonetheme service finder bookings Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover CVE-2025-6574 8.8 HighNovember 1, 2025
• aonetheme service finder bookings Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password CVE-2025-5949 8.8 HighNovember 1, 2025
• aonetheme service finder bookings Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business CVE-2025-5948 9.8 CriticalSeptember 19, 2025
• aonetheme service finder sms system Service Finder SMS System <= 2.0.0 - Authentication Bypass CVE-2025-5955 8.1 HighSeptember 19, 2025
• aonetheme service finder bookings Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie CVE-2025-5947 Public exploit 9.8 CriticalAugust 1, 2025
• aonetheme service finder sms system Service Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation CVE-2025-5954 9.8 CriticalAugust 1, 2025
• aonetheme service finder booking WordPress Service Finder Booking plugin <= 6.1 - Privilege Escalation Vulnerability CVE-2025-23970 9.8 CriticalJuly 4, 2025
• aonetheme service finder bookings Service Finder Bookings <= 5.1 - Unauthenticated Privilege Escalation via 'nsl_registration_store_extra_input' CVE-2025-2470 9.8 CriticalApril 25, 2025
• aonetheme service finder bookings Service Finder Bookings <= 5.0 - Unauthenticated Privilege Escalation via Account Takeover CVE-2024-13442 9.8 CriticalMarch 19, 2025