{"id":9471,"date":"2025-07-31T22:46:26","date_gmt":"2025-07-31T22:46:26","guid":{"rendered":"http:\/\/localhost\/?p=9471"},"modified":"2025-07-31T22:46:26","modified_gmt":"2025-07-31T22:46:26","slug":"service-finder-sms-system-200-unauthenticated-privilege-escalation","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=9471","title":{"rendered":"Service Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation"},"content":{"rendered":"
\n

CVE Details<\/h2>\n
\n
\n

Basic Information<\/h3>\n\n\n\n\n\n
Title<\/th>\nService Finder SMS System <= 2.0.0 - Unauthenticated Privilege Escalation<\/td>\n<\/tr>\n
Type<\/th>\ncve<\/td>\n<\/tr>\n
Published<\/th>\n2025-08-01T02:24:17.625Z<\/td>\n<\/tr>\n
Modified<\/th>\n2025-08-01T02:24:17.625Z<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Product Information<\/h3>\n\n\n\n\n
Vendor<\/th>\naonetheme<\/td>\n<\/tr>\n
Product<\/th>\nService Finder SMS System<\/td>\n<\/tr>\n
Version<\/th>\n*<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
\n

CVSS Information<\/h3>\n\n\n\n
Base Score<\/th>\n9.8 (CRITICAL)<\/td>\n<\/tr>\n
Attack Vector<\/th>\nCVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:H<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

AI Analysis<\/h3>\n\n\n\n\n\n\n
AI Description<\/th>\nThe Service Finder SMS System WordPress plugin is vulnerable to unauthenticated privilege escalation due to improper user role restrictions during registration. Attackers can exploit this to create administrator accounts, leading to full system control.<\/td>\n<\/tr>\n
AI Severity<\/th>\nCritical<\/td>\n<\/tr>\n
AI Vendor<\/th>\naonetheme<\/td>\n<\/tr>\n
AI Product<\/th>\nService Finder SMS System<\/td>\n<\/tr>\n
AI Version<\/th>\nUp to 2.0.0<\/td>\n<\/tr>\n<\/table>\n<\/div>\n
\n

Affected Products<\/h4>\n