Privilege Escalation Vulnerability in Service Finder SMS System Plugin for WordPress

CVE-2025-5954

What is CVE-2025-5954?

The Service Finder SMS System plugin for WordPress is susceptible to privilege escalation due to improper handling of user role assignments during the registration process. This vulnerability allows unauthenticated individuals to register as administrators, circumventing standard security measures. All versions up to and including 2.0.0 of the plugin are affected, highlighting a critical need for users to implement necessary updates and security practices to mitigate the risk of account takeover.

References