Critical · published September 19, 2025
🚨 Unauthenticated attackers can take over any account, including admins in the Service Finder Bookings plugin for WordPress, due to a sneaky lack of identity validation in versions up to 6.0! 🔥 Think of this vulnerability like a restaurant where anyone can walk in and claim to be the head chef without even showing their ID — all they need is the right name on the reservation list! An attacker could waltz right in and assume control of admin accounts, unlocking the gates to sensitive data, configurations, and even the ability to add malicious content. With subscriber privileges or a little brute-forcing, this can lead to devastating consequences for your site and its users.
Think of this vulnerability like a restaurant where anyone can walk in and claim to be the head chef without even showing their ID — all they need is the right name on the reservation list! This privilege escalation vulnerability occurs because the Service Finder Bookings plugin fails to properly verify a user's identity when they attempt to claim a business via the claim_business AJAX action, allowing unauthorized access to accounts.
An attacker could waltz right in and assume control of admin accounts, unlocking the gates to sensitive data, configurations, and even the ability to add malicious content. With subscriber privileges or a little brute-forcing, this can lead to devastating consequences for your site and its users. Immediate action is critical! Update the Service Finder Bookings plugin to the latest version beyond 6.0 to patch this vulnerability. Additionally, consider implementing strong authentication measures to safeguard user identities. You've got this! Stay vigilant, patch up, and you’ll keep your site safe and sound! 🛡️