Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

A popular WordPress theme has a worrying security flaw which could allow full site takeover - here's what we know

WordPress logo on mobile.
  • CVE-2025-5947 allows unauthenticated admin access in Service Finder WordPress theme versions ≤ 6.0
  • Over 13,800 exploit attempts observed since August; attackers actively target vulnerable sites
  • Patching is critical; blocking five known IPs may help but won’t stop future attacks

Websites running the popular Service Finder Bookings WordPress theme are being actively targeted following the discovery of a critical severity vulnerability.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.