Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:07:57 +0000 bdu:2025-13638 https://cve.radiocsirt.org/vuln/bdu:2025-13638 bdu:2025-13638 https://cve.radiocsirt.org/vuln/bdu:2025-13638 cnvd-2025-18283 https://cve.radiocsirt.org/vuln/cnvd-2025-18283 cnvd-2025-18283 https://cve.radiocsirt.org/vuln/cnvd-2025-18283 EUVD-2026-287922 https://cve.radiocsirt.org/vuln/euvd-2026-287922 EUVD-2026-287922 https://cve.radiocsirt.org/vuln/euvd-2026-287922 fkie_cve-2025-5947 https://cve.radiocsirt.org/vuln/fkie_cve-2025-5947 <p>The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user&#39;s cookie value prior to logging them in through the service_finder_switch_back() function. This makes it possible for unauthenticated attackers to login as any user including admins.</p> <p>The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user&#39;s cookie value prior to logging them in through the service_finder_switch_back() function. This makes it possible for unauthenticated attackers to login as any user including admins.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-5947 GHSA-x2xx-4qhp-2vqx https://cve.radiocsirt.org/vuln/ghsa-x2xx-4qhp-2vqx <p>The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user&#39;s cookie value prior to logging them in through the service_finder_switch_back() function. This makes it possible for unauthenticated attackers to login as any user including admins.</p> <p>The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user&#39;s cookie value prior to logging them in through the service_finder_switch_back() function. This makes it possible for unauthenticated attackers to login as any user including admins.</p> https://cve.radiocsirt.org/vuln/ghsa-x2xx-4qhp-2vqx