CVE-2025-23970

WordPress Service Finder Booking plugin <= 6.1 - Privilege Escalation Vulnerability

Description

Incorrect Privilege Assignment vulnerability in aonetheme Service Finder Booking sf-booking allows Privilege Escalation.This issue affects Service Finder Booking: from n/a through <= 6.1.

INFO

Published Date :

2025-07-04T11:18:11.730Z

Last Modified :

2026-04-01T15:43:50.261Z

Source :

Patchstack

AFFECTED PRODUCTS

The following products are affected by CVE-2025-23970 vulnerability.

Vendors	Products
Wordpress	Wordpress

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-23970.

URL	Resource
https://patchstack.com/database/Wordpress/Plugin/sf-booking/vulnerability/wordpress-service-finder-booking-6-0-privilege-escalation-vulnerability?_s_id=cve