CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's identity prior to processing a password change request. This makes it possible for authenticated attackers with subscriber access or higher to reset other users' passwords, including those of admins.
Explanation of Vulnerability in Simple Terms
Service Finder Bookings versions 6.0 and earlier contain an authorization flaw that allows authenticated users to read, modify, or delete data without proper access controls. An attacker with a low-privilege account can escalate their capabilities to perform high-impact operations. The vulnerability affects confidentiality, integrity, and availability of the application.
What an attacker can do
Read, modify, or delete sensitive data and perform unauthorized actions within the application.
Potential impact on your site
Unauthorized users can access, alter, or destroy booking data and other sensitive information in the system.
Conditions required to exploit
Attacker must have a valid low-privilege user account; no user interaction required.
Key dates
External resources
Related vulnerabilities
