How many aonetheme Service Finder Bookings CVEs are in CISA KEV?

None of aonetheme Service Finder Bookings's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of aonetheme Service Finder Bookings are affected?

8 distinct aonetheme Service Finder Bookings versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in aonetheme Service Finder Bookings CVEs?

aonetheme Service Finder Bookings's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-266 (Incorrect Privilege Assignment), CWE-288 (Authentication Bypass Using an Alternate Path or Channel).

How many critical aonetheme Service Finder Bookings vulnerabilities are there?

aonetheme Service Finder Bookings has 4 critical and 2 high-severity CVEs.

What is the average severity of aonetheme Service Finder Bookings CVEs?

The average CVSS base score across aonetheme Service Finder Bookings's scored CVEs is 9.5.

RadicalNotion.AI

Log in Start free

aonetheme

6 CVEs

aonetheme Service Finder Bookings Vulnerabilities

Name: aonetheme Service Finder Bookings vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Service Finder Bookings by aonetheme.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

9.5

Avg CVSS

2025–2025

Last updated November 1, 2025

Overview

aonetheme Service Finder Bookings has 6 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 9.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting aonetheme Service Finder Bookings, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of aonetheme Service Finder Bookings's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High2

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of aonetheme Service Finder Bookings's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No aonetheme Service Finder Bookings CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every aonetheme Service Finder Bookings version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 6.03 CVEs
< 6.11 CVE
<= 5.01 CVE
<= 5.11 CVE

Fixed in

> 6.03 CVEs
> 5.01 CVE
> 5.11 CVE
6.11 CVE

Find a version

6 CVEs

Sort

Service Finder Bookings < 6.1 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
CVE-2025-6574
Patch
CWE-639
High · CVSS 8.8
EPSS 0.3% (20th pct)2025-11-01
Service Finder Bookings <= 6.0 - Authenticated (Subscriber+) Privilege Escalation via change_candidate_password
CVE-2025-5949
Patch
CWE-639
High · CVSS 8.8
EPSS 0.4% (28th pct)2025-11-01
Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business
CVE-2025-5948
Patch
CWE-639
Critical · CVSS 9.8
EPSS 0.4% (35th pct)2025-09-19
Service Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
CVE-2025-5947
Patch
CWE-639
Critical · CVSS 9.8
EPSS 4.5% (91th pct)2025-08-01
Service Finder Bookings <= 5.1 - Unauthenticated Privilege Escalation via 'nsl_registration_store_extra_input'
CVE-2025-2470
Patch
CWE-266
Critical · CVSS 9.8
EPSS 0.4% (37th pct)2025-04-25
Service Finder Bookings <= 5.0 - Unauthenticated Privilege Escalation via Account Takeover
CVE-2024-13442
Patch
CWE-288
Critical · CVSS 9.8
EPSS 0.4% (35th pct)2025-03-19

Common weakness types

The CWE weakness categories most often found in aonetheme Service Finder Bookings CVEs. Follow any weakness for its full explanation.

Other aonetheme products

Browse vulnerabilities for other products by aonetheme.

Service Finder Booking3 CVEs Service Finder SMS System2 CVEs

All aonetheme vulnerabilities

Frequently asked questions

Common questions about aonetheme Service Finder Bookings vulnerabilities.

How many CVEs does aonetheme Service Finder Bookings have?: aonetheme Service Finder Bookings has 6 published CVE records since 2025.
How many aonetheme Service Finder Bookings CVEs are in CISA KEV?: None of aonetheme Service Finder Bookings's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for aonetheme Service Finder Bookings vulnerabilities?: No aonetheme Service Finder Bookings CVEs currently have a tracked public exploit in this dataset.
Which versions of aonetheme Service Finder Bookings are affected?: 8 distinct aonetheme Service Finder Bookings versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in aonetheme Service Finder Bookings CVEs?: aonetheme Service Finder Bookings's CVEs most often map to these CWE weakness types: CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-266 (Incorrect Privilege Assignment), CWE-288 (Authentication Bypass Using an Alternate Path or Channel).
How many critical aonetheme Service Finder Bookings vulnerabilities are there?: aonetheme Service Finder Bookings has 4 critical and 2 high-severity CVEs.
What is the average severity of aonetheme Service Finder Bookings CVEs?: The average CVSS base score across aonetheme Service Finder Bookings's scored CVEs is 9.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track aonetheme Service Finder Bookings vulnerabilities

Monitor new aonetheme Service Finder Bookings vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing