Access violation vulnerability in Service Finder Bookings 6.1

The Service Finder Bookings plugin for WordPress has a security issue that can allow unauthorized access to user accounts. This is because the plugin does not properly check a user’s identity before allowing them to change their email address. This means that attackers with certain levels of access can change the email address of any user, including administrators, and use that to reset their password and gain access to their account.