Aonetheme
9 CVEs across 3 Aonetheme products. Browse Aonetheme vulnerabilities, severities, and proof-of-concept exploits.
Aonetheme products with known CVEs
Aonetheme CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-28161 | High | 8.8 | 2026-08-13 | Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions. |
CVE-2026-28159 | Medium | 6.5 | 2026-08-13 | Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions. |
CVE-2025-6574 | High | 8.8 | 2025-11-01 | The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and excluding, 6.1. This is… |
CVE-2025-5949 | High | 8.8 | 2025-11-01 | The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is… |
CVE-2025-5948 | Critical | 9.8 | 2025-09-19 | The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is… |
CVE-2025-5955 | High | 8.1 | 2025-09-19 | The Service Finder SMS System plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.0. This is due to the plugi… |
CVE-2025-5947 | Critical | 9.8 | 2025-08-01 | The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. Thi… |
CVE-2025-5954 | Critical | 9.8 | 2025-08-01 | The Service Finder SMS System plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0. This… |
CVE-2025-23970 | Critical | 9.8 | 2025-07-04 | Incorrect Privilege Assignment vulnerability in aonetheme Service Finder Booking sf-booking allows Privilege Escalation.This issue affects Service Finder Booki… |
CVE-2025-2470 | Critical | 9.8 | 2025-04-25 | The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board WordPress Theme, is vulnerable to privilege escalation i… |
CVE-2024-13442 | Critical | 9.8 | 2025-03-19 | The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.0. This is… |