AAonetheme

Products

Exploited and recent CVEs

• CVE-2026-28161 High 8.8 WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability 0.4%
• CVE-2026-28159 Medium 6.5 WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability 0.4%
• CVE-2025-6574 High 8.8 Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover 0.3%
• CVE-2025-5949 High 8.8 Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password 0.4%
• CVE-2025-5948 Critical 9.8 Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business 0.4%
• CVE-2025-5955 High 8.1 Service Finder SMS System <= 2.0.0 - Authentication Bypass 0.4%
• CVE-2025-5947 Critical 9.8 Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie 4.9%
• CVE-2025-5954 Critical 9.8 Service Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation 0.5%
• CVE-2025-23970 Critical 9.8 WordPress Service Finder Booking plugin <= 6.1 - Privilege Escalation Vulnerability 0.8%
• CVE-2025-2470 Critical 9.8 Service Finder Bookings <= 5.1 - Unauthenticated Privilege Escalation via 'nsl_registration_store_extra_input' 0.5%
• CVE-2024-13442 Critical 9.8 Service Finder Bookings <= 5.0 - Unauthenticated Privilege Escalation via Account Takeover 0.4%