CVE-2025-5955
The Service Finder SMS System plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.0. This is due to the plugin not verifying a user's phone number before logging them in. This makes it possible for unauthenticated attackers to login as arbitrary users.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-09-19 05:15:33
Güncelleme
2025-09-19 16:00:27
Source Identifier
security@wordfence.com
KEV Date Added
-