CVE-2025-2470
Service Finder Bookings <= 5.1 - Unauthenticated Privilege Escalation via 'nsl_registration_store_extra_input'
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Service Finder Bookings <= 5.1 - Unauthenticated Privilege Escalation via 'nsl_registration_store_extra_input'
The Service Finder Bookings plugin for WordPress, used by the Service Finder - Directory and Job Board WordPress Theme, is vulnerable to privilege escalation in all versions up to, and including, 5.1. This is due to a lack of restriction on user role in the 'nsl_registration_store_extra_input' function. This makes it possible for unauthenticated attackers to register an account on the site with an arbitrary role, including Administrator, when registering via a social login. The Nextend Social Login plugin must be installed and configured to exploit the vulnerability.
Reserved 2025-03-17 | Published 2025-04-25 | Updated 2025-04-25 | Assigner WordfenceCWE-266 Incorrect Privilege Assignment
| 2025-04-24: | Disclosed |
Alyudin Nafiie
www.wordfence.com/...-262b-46d9-a839-0a573813cfa1?source=cve
themeforest.net/...business-listing-wordpress-theme/15208793
Support options
