Attackers Actively Exploiting Critical Vulnerability in Service Finder Bookings Plugin 

Attackers Actively Exploiting Critical Vulnerability in Service Finder Bookings Plugin 

SecurityVendor
Yanac

On June 8th, 2025, we received a submission through our Bug Bounty Program for an Authentication Bypass vulnerability in Service Finder Bookings, a WordPress plugin bundled with the Service Finder theme. This theme has been sold to approximately 6,000 customers. This vulnerability makes it possible for an unauthenticated attacker to gain access to any account on a site including accounts with the ‘administrator’ role.
The post Attackers Actively Exploiting Critical Vulnerability in Service Finder Bookings Plugin appeared first on Wordfence.WordfenceRead More