On June 8th, 2025, we received a submission through our Bug Bounty Program for an Authentication Bypass vulnerability in Service Finder Bookings, a WordPress plugin bundled with the Service Finder theme. This theme has been sold to approximately 6,000 customers. This vulnerability makes it possible for an unauthenticated attacker to gain access to any account on a site including accounts with the ‘administrator’ role. The vendor released the patched version on July 17, 2025, and we publicly disclosed this vulnerability on July 31, 2025. Author: AlienVault
Related Tags:
service finder
service finder bookings
T1506
authentication bypass
WordPress
vulnerability
exploit
T1078
T1059
Associated Indicators:
185.109.21.157
5.189.221.98
192.121.16.196
194.68.32.71