CVE-2025-6058: WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload
The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the imageuploadhandle() function hooked via the 'addbookingtype' route in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress plugin WPBookitto a version that resolves this vulnerability.Fixed in 1.0.4 - Compensating control
Given the issue is reachable via the 'add_booking_type' route and is exploitable by unauthenticated attackers, restrict or block public access to the affected route/endpoint at the web server/WAF/ACL until the plugin is upgraded.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6058?
CVE-2025-6058 is classified as a high-severity vulnerability due to its ability to allow arbitrary file uploads without proper validation.
How does CVE-2025-6058 affect the WPBookit plugin for WordPress?
CVE-2025-6058 affects the WPBookit plugin by allowing unauthenticated attackers to upload malicious files through the image_upload_handle() function.
How do I fix CVE-2025-6058?
To fix CVE-2025-6058, update the WPBookit plugin to version 1.0.5 or later, which includes the necessary file type validation.
What versions of WPBookit are affected by CVE-2025-6058?
CVE-2025-6058 affects all versions of the WPBookit plugin up to and including 1.0.4.
Who can exploit CVE-2025-6058?
CVE-2025-6058 can be exploited by unauthenticated attackers due to the lack of proper security measures in file upload handling.