CVE-2025-6057: WPBookit <= 1.0.4 - Authenticated (Subscriber+) Arbitrary File Upload
The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handleimageupload() function in all versions up to, and including, 1.0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WPBookit pluginto a version that resolves this vulnerability.Fixed in 1.0.4 - Compensating control
Restrict access to WordPress to prevent or limit authenticated Subscriber-level uploads until WPBookit is updated (e.g., limit the number of users with Subscriber+ roles that can reach the vulnerable upload functionality).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6057?
CVE-2025-6057 has a high severity rating due to its potential for arbitrary file uploads.
How do I fix CVE-2025-6057?
To fix CVE-2025-6057, update the WPBookit plugin to version 1.0.5 or later.
Who is affected by CVE-2025-6057?
CVE-2025-6057 affects all versions of the WPBookit plugin up to and including 1.0.4.
What types of attacks can be performed due to CVE-2025-6057?
CVE-2025-6057 allows authenticated attackers to upload arbitrary files, potentially leading to further exploitation.
What functions are involved in CVE-2025-6057?
The vulnerability in CVE-2025-6057 is rooted in the missing file type validation in the handle_image_upload() function.