Service Finder SMS System vulnerabilities

2 known vulnerabilities in Service Finder SMS System from Aonetheme. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Service Finder SMS System: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-5955Sep 19, 2025Aonetheme

  The Service Finder SMS System plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.0. This is due to the plugin not verifying a user's phone number before logging them in. This makes it possible for unauthentica

• 9.8 Critical severity

  Service Finder SMS System: Improper Privilege Management

  CVE-2025-5954Aug 1, 2025Aonetheme

  The Service Finder SMS System plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0. This is due to the plugin not restricting user role selection at the time of registration through the aon