CVE-2025-5954 - CVE House
Back to Database
Status published Critical CVE-2025-5954

Service Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation

Vulnerability Description

The Service Finder SMS System plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0. This is due to the plugin not restricting user role selection at the time of registration through the aonesms_fn_savedata_after_signup() function. This makes it possible for unauthenticated attackers to register as an administrator user.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-5954

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Friderika Baranyai

References

More from aonetheme

View All →
CVE-2025-6574
Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
High 8.8
CVE-2025-5955
Service Finder SMS System <= 2.0.0 - Authentication Bypass
High 8.1
CVE-2025-5949
Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password
High 8.8
CVE-2025-5948
Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business
Critical 9.8
CVE-2025-5947
Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
Critical 9.8

Affected Vendor

Affected Software

Service Finder SMS System
Vulnerable Versions:
0

Timeline

Official Publish: August 1st, 2025
Last Modified: April 8th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-269

MITRE ATT&CK TTPs

T1078 Valid Accounts
Persistence
T1098 Account Manipulation
Privilege Escalation
T1548 Abuse Elevation Control Mechanism
Privilege Escalation
T1222 File and Directory Permissions Modification
Defense Evasion
T1134 Access Token Manipulation
Defense Evasion