Threat actors are actively exploiting a critical security flaw
impacting the Service Finder WordPress theme that makes it possible
to gain unauthorized access to any account, including
administrators, and take control of susceptible sites. The
authentication bypass vulnerability, tracked as CVE-2025-5947 (CVSS
score: 9.8), affects the Service Finder Bookings, a WordPress
plugin bundled with the
Read more https://thehackernews.com/2025/10/critical-exploit-lets-hackers-bypass.html
