Authentication vulnerability in Service Finder Bookings 5.0

The Service Finder Bookings plugin for WordPress has a security issue that could allow someone to gain unauthorized access to user accounts. This can happen when the plugin automatically logs a user in after booking a service, or when updating profile information like a password. This vulnerability affects all versions up to and including version 5.0. Attackers without proper authentication could potentially login as any user with a known email address or change the password of any user, including administrators.