CVE-2025-5947 - CVE House
Back to Database
Status published Critical CVE-2025-5947

Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie

Vulnerability Description

The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's cookie value prior to logging them in through the service_finder_switch_back() function. This makes it possible for unauthenticated attackers to login as any user including admins.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-5947

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Friderika Baranyai

References

More from aonetheme

View All →
CVE-2025-6574
Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
High 8.8
CVE-2025-5955
Service Finder SMS System <= 2.0.0 - Authentication Bypass
High 8.1
CVE-2025-5954
Service Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation
Critical 9.8
CVE-2025-5949
Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password
High 8.8
CVE-2025-5948
Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business
Critical 9.8

Affected Vendor

Affected Software

Service Finder Bookings
Vulnerable Versions:
0

Timeline

Official Publish: August 1st, 2025
Last Modified: April 8th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-639

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1213 Data from Information Repositories
Collection
T1021 Remote Services
Lateral Movement
T1098 Account Manipulation
Privilege Escalation