PT-2025-29294 · WordPress · Wpbookit

Matthew Rollings · CVE-2025-6058 · Publicado 2025-07-12 · Atualizado 2025-07-22

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WPBookit versions up to and including 1.0.4

Description The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image upload handle() function, which is triggered via the '/add booking type' route. This allows unauthenticated attackers to upload arbitrary files to the affected site's server, potentially leading to remote code execution.

Recommendations WPBookit versions up to and including 1.0.4: Update to version 1.0.5 or later to address the issue.

Correção

RCE

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2025-6058

Produtos afetados

Wpbookit

Referências · 13

• https://wordfence.com/threat-intel/vulnerabilities/id/1d779ad1-fdbe-444c-85c5-99146a1a03d8?source=cve · Nota
• https://t.me/cvetracker/27620 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-6058 · Nota de Segurança
• https://t.me/cvenotify/128680 · Publicação no Telegram
• https://twitter.com/CveFindCom/status/1943893116555002193 · Publicação no Twitter
• https://plugins.trac.wordpress.org/browser/wpbookit/trunk/core/admin/classes/controllers/class.wpb-booking-type-controller.php#L455 · Nota
• https://osv.dev/vulnerability/CVE-2025-6058 · Aviso do Fabricante
• https://twitter.com/cracbot/status/1945800693190725815 · Publicação no Twitter
• https://twitter.com/pdnuclei_bot/status/1947567312510628236 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1943898117897666757 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1943914599746576621 · Publicação no Twitter
• https://twitter.com/Nxploited/status/1944072796906119645 · Publicação no Twitter
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3314288%40wpbookit&new=3314288%40wpbookit&sfp_email=&sfph_mail= · Correção