aonetheme vulnerabilities
11 published CVEs name aonetheme among the affected products.
- Published CVEs
- 11
- Last 12 months
- 2
- Critical
- 6
- Known exploited
- 0
Critical 6High 4Medium 1Low 0Not scored 0
CVEs per yearBy the year they were published
- 20259
- 20262
Newest CVEs
- CVE-2026-28161
WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability
Aonetheme · Service Finder Booking
High8.8 - CVE-2026-28159
WordPress Service Finder Booking plugin <= 6.2 - Broken Access Control vulnerability
Aonetheme · Service Finder Booking
Medium6.5 - CVE-2025-6574
Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
aonetheme · Service Finder Bookings
High8.8 - CVE-2025-5949
Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password
aonetheme · Service Finder Bookings
High8.8 - CVE-2025-5948
Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business
aonetheme · Service Finder Bookings
Critical9.8 - CVE-2025-5955
Service Finder SMS System <= 2.0.0 - Authentication Bypass
aonetheme · Service Finder SMS System
High8.1 - CVE-2025-5947
Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
aonetheme · Service Finder Bookings
Critical9.8 - CVE-2025-5954
Service Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation
aonetheme · Service Finder SMS System
Critical9.8 - CVE-2025-23970
WordPress Service Finder Booking plugin <= 6.1 - Privilege Escalation Vulnerability
aonetheme · Service Finder Booking
Critical9.8 - CVE-2025-2470
Service Finder Bookings <= 5.1 - Unauthenticated Privilege Escalation via 'nsl_registration_store_extra_input'
aonetheme · Service Finder Bookings
Critical9.8