Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 25/01/2025 Updated: 25/01/2025

Arbitrary File Upload Vulnerability in WPBookit Plugin Pre-1.7

The WPBookit plugin for WordPress has a vulnerability that allows arbitrary file uploads. This happens because it does not properly check file types in the 'WPB_Profile_controller::handle_image_upload' function. Versions up to and including 1.6.9 are affected. Unauthenticated attackers can upload any files to the server of an affected site. This may lead to remote code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
iqonic design wpbookit

CWE-434 https://nvd.nist.gov https://www.first.org/epss https://documentation.iqonic.design/wpbookit/versions/change-log https://www.wordfence.com/threat-intel/vulnerabilities/id/19bf7a68-e76d-4740-9f35-b6084094f59b?source=cve

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2025-0357

Vulnerability Summary

References

Vulmon Search

About

Products

Connect