Advisories · Technology

Aonetheme Service Finder Booking.

Every CVE that names Aonetheme Service Finder Booking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-28161 CVE record

CVSS 8.8 High

WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability
- Aonetheme Service Finder Booking
- Privilege escalation
Not analysed yet 13 Aug 2026
CVE-2026-28159 CVE record

CVSS 6.5 Medium

WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability
- Aonetheme Service Finder Booking
- Broken access control
Not analysed yet 13 Aug 2026
CVE-2025-23970 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Service Finder Booking plugin <= 6.1 - Privilege Escalation Vulnerability
- aonetheme Service Finder Booking
- Privilege escalation
Not analysed yet 4 Jul 2025