Service Finder issue (CVE-2025-5947) — a stranger logs in as your administrator

The WordPress theme Service Finder Bookings has a critical vulnerability CVE-2025-5947 (CVSS 9.8) : due to incorrect validation of a single cookie ( service_finder_switch_back ), an attacker can bypass login and log in as an administrator . The patch was released on 17.7.2025 (version 6.1 ), and automated attacks started immediately — over 13,800 attempts were recorded (a new wave in October 2025).

Are you affected?

Use a Service Finder theme older than 6.1
Unknown admin logins or content changes
New administrator accounts that you didn't create

What to do now

Update Service Finder to version 6.1 or later.
Check and delete unknown admin accounts; change all passwords.
View planted files and scheduled tasks.

Do you suspect that someone has accessed your site? Send us the link — the diagnosis is free, and we will respond within 5 minutes. Urgent repair →

WMD — Super fast support.

Drupal SA-CORE-2026-004 — critical SQL injection (already being exploited)

Motors WordPress theme (CVE-2025-4322) — someone changed your admin password?

News

Our users about us

Adriano Bratovic

We have been cooperating with WMD for years. We cannot recommend them enough. They went above and beyond and went the extra mile (not included in the offer) countless times. Grateful to have such support and a provider.

Joško Matušan

Apsolutno sam oduševljen WMD-om! Korisnička podrška je fenomenalna -brza i profesionalna te rješavaju probleme dok ste još na vezi. Usluga je stabilna, brza i pouzdana. Od kada sam kod njih, a to je desetak godina, nemam apsolutno nikakvih briga oko svog weba, tako da sam kod njih smjestio već 4…

ivan K

Svaka čast svima u WMD podršci, koristimo dosta usluga od WMDa i svaki puta i u bilo koje doba dana ste na usluzi. Sigurno budemo i dalje koristili vaše usluge

Goran Stevic

I have to admit, I have worked with various companies, but kudos to you, you are the best!!! Quick answers, solve the problem quickly, really professional, kudos to you greetings from Sweden

Ivana Ivanusec

WMD is our long-standing and reliable partner in the world of hosting and web design! 🚀 Their top-notch technical support, speed, and professionalism allow us to deliver flawlessly functioning websites to our users. They are always available, accommodating and ready to help, and they are extremely…

Tomislav Vrkljan

WMD offers quality web hosting services with excellent customer support. I have been using their services since 2006 and in all these years I have not come across a more reliable partner in this field. Their expert team quickly and efficiently solves any technical challenge, while the flexibility…

Portal dugoselo.info

"The speed, knowledge, and availability of WMD customer service gives me full confidence in the project, ease, and security in using the service and tools. They quickly, very communicatively, and professionally resolved every query I had."

GNOSIS Translation Agency

After experiences with various providers, we finally found a reliable hosting partner in WMD. The quality of service is at a high level, and we quickly receive an answer and an adequate solution to every question we have. I can recommend WMD to anyone who wants quality and reliable hosting.

Problems for May 1st

Since we wanted to create the content on the website ourselves, we chose WMD. And as it happens with beginners, we encountered an unsolvable problem. We sent a request for help to WMD, or rather HELP!!!!!. It was on May 1st of this year, well after midnight. And…. very quickly (really VERY quickly)…

SEO.hr

If you decide to host based on price, you will most likely end up at the back of the queue when something happens to the server. My advice is to not skimp on hosting and to get hosting where someone will always be there to help you and make sure everything is running smoothly no matter how big or…

Gamabon doo

In the economic crisis that has been on our market for a long time, every expense, whether for a good or a service, seems excessive or expensive, regardless of the specific monetary value. And when the good or service is of poor quality, then the expense is especially large and expensive, even in…

1Click - IT solutions

We switched to your hosting a while ago based on a recommendation from a colleague. Although we already had several domains with services opened with other hosting companies, we must emphasize that we are extremely satisfied with the switch. We would like to take this opportunity to commend your…

Virna, trade for IT services

I would like to take this opportunity to commend your customer service and your service in general. Your administrators are fair, kind and have enormous patience for all questions and are willing to help at any time. I have been doing this job for 20 years and I can freely say that I have only had…

Specialist practice of family medicine with diagnostics

If you want to have a beautiful and functional website that will reflect your business, I definitely recommend WMD. I have been working with this company for 7 years and I am extremely satisfied with their hosting services, web design, and especially the speed and quality of web support. It is…

Helcos doo

Dear gentlemen! I congratulate you on your idea and realization of the JUMBO posters . They are unique and useful. I suggest you make them bigger, I think they are not sufficiently known and recognized by the public. You responded quickly and professionally to my request to change the background…

SEE ALL COMMENTS FROM OUR USERS

Service Finder issue (CVE-2025-5947) — a stranger logs in as your administrator

Service Finder issue (CVE-2025-5947) — a stranger logs in as your administrator