PT-2025-31598 · WordPress · Service Finder Bookings

Friderika Baranyai · Published 2025-07-31 · Updated 2026-03-31 · CVE-2025-5947

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Service Finder Bookings plugin for WordPress versions up to and including 6.0

Description The Service Finder Bookings plugin for WordPress is susceptible to a privilege escalation issue stemming from an authentication bypass. This occurs because the plugin does not properly validate a user's cookie value before granting access through the service finder switch back() function. This allows unauthenticated attackers to log in as any user, including administrators. Over 13,800 exploit attempts have been detected since August, with over 1,500 daily attacks observed since late September. The vulnerability allows attackers to bypass authentication and sign in as any user, including administrators, due to improper cookie validation in the service finder switch back() function.

Recommendations Update to Service Finder Bookings version 6.1 to address this vulnerability.

Fix

LPE

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

BDU:2025-13638

CVE-2025-5947

Affected Products

Service Finder Bookings

References · 50

• https://bdu.fstec.ru/vul/2025-13638 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-5947 · Security Note
• https://t.me/cveNotify/140000 · Telegram Post
• https://reddit.com/r/DefenceProfessionals/comments/1o2atvc/critical_flaw_in_wordpress_service_finder_theme · Reddit Post
• https://twitter.com/Whitehead4Jeff/status/1976344031383982473 · Twitter Post
• https://t.me/CVEtracker/28914 · Telegram Post
• https://twitter.com/0dayPublishing/status/1976330343658541322 · Twitter Post
• https://twitter.com/offseq/status/1951138443154633213 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1o4l7oe/top_10_trending_cves_12102025 · Reddit Post
• https://wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/sf-booking/service-finder-bookings-60-authentication-bypass-via-user-switch-cookie · Note
• https://themeforest.net/item/service-finder-service-and-business-listing-wordpress-theme/15208793 · Note
• https://twitter.com/VulmonFeeds/status/1951150218965139927 · Twitter Post
• https://twitter.com/riskigy/status/1977075499919720906 · Twitter Post
• https://t.me/pentestingnews/69239 · Telegram Post
• https://twitter.com/CVEnew/status/1951140940527124879 · Twitter Post