CVE-2025-5947
CRITICAL EXPLOITED NUCLEIService Finder Bookings <6.0 - Privilege Escalation
Title source: llmExploitation Summary
CVE-2025-5947 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including M4rgs, xxconi. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository contains a functional exploit for CVE-2025-5947, targeting the Service Finder WordPress plugin. The exploit leverages an unauthenticated AJAX endpoint to bypass access controls and escalate privileges to admin.
Description
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's cookie value prior to logging them in through the service_finder_switch_back() function. This makes it possible for unauthenticated attackers to login as any user including admins.
Exploits (2)
The repository contains a functional exploit for CVE-2025-5947, targeting the Service Finder WordPress plugin. The exploit leverages an unauthenticated AJAX endpoint to bypass access controls and escalate privileges to admin.
This repository contains a functional exploit for CVE-2025-5947, an authentication bypass vulnerability in the WordPress Service Finder Bookings plugin. The exploit leverages cookie spoofing to bypass authentication and gain admin access.
Nuclei Templates (1)
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H