CyberHappenings logo
☰
Home Browse About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Active exploitation of authentication bypass in Service Finder WordPress theme

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Threat actors are actively exploiting a critical vulnerability in the Service Finder WordPress theme, allowing them to bypass authentication and gain administrative access. The flaw, tracked as CVE-2025-5947, affects versions 6.0 and older and has been exploited since September 2025. The vulnerability enables attackers to log in as any user, including administrators, without authentication. Over 13,800 exploitation attempts have been recorded since August 2025, with a surge of over 1,500 attempts daily in late September. Administrators are advised to update to version 6.1 or stop using the theme to mitigate the risk.

Timeline

  1. 08.10.2025 18:57 1 articles · 2h ago

    Active exploitation of CVE-2025-5947 in Service Finder WordPress theme

    Threat actors began exploiting a critical vulnerability in the Service Finder WordPress theme in September 2025. The flaw, tracked as CVE-2025-5947, allows attackers to bypass authentication and gain administrative access. Over 13,800 exploitation attempts have been recorded since August 2025, with a surge of over 1,500 attempts daily in late September. The vulnerability affects versions 6.0 and older and was discovered by a security researcher in June 2025. The vendor released a fix in July 2025, but exploitation began shortly after public disclosure. Administrators are advised to update to version 6.1 or stop using the theme to mitigate the risk.

    Show sources
    Open in new tab

Information Snippets