CVE-2025-0357

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-0357", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-01-09T07:03:49.584Z", "datePublished": "2025-01-25T01:44:36.912Z", "dateUpdated": "2026-04-08T16:37:56.501Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:37:56.501Z"}, "affected": [{"vendor": "Iqonic Design", "product": "WPBookit", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.6.9", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'WPB_Profile_controller::handle_image_upload' function in versions up to, and including, 1.6.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible."}], "title": "WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/19bf7a68-e76d-4740-9f35-b6084094f59b?source=cve"}, {"url": "https://documentation.iqonic.design/wpbookit/versions/change-log"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "cweId": "CWE-434", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "type": "finder", "value": "Istv\u00e1n M\u00e1rton"}], "timeline": [{"time": "2025-01-09T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2025-01-09T00:00:00.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-01-24T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-27T15:34:50.995025Z", "id": "CVE-2025-0357", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-27T15:34:55.093Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0357", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-01-27T15:34:50.995025Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-27T15:34:43.167Z"}}], "cna": {"title": "WPBookit <= 1.6.9 - Unauthenticated Arbitrary File Upload", "credits": [{"lang": "en", "type": "finder", "value": "Istv\u00e1n M\u00e1rton"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "Iqonic Design", "product": "WPBookit", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.6.9"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-01-09T00:00:00.000Z", "value": "Discovered"}, {"lang": "en", "time": "2025-01-09T00:00:00.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-01-24T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/19bf7a68-e76d-4740-9f35-b6084094f59b?source=cve"}, {"url": "https://documentation.iqonic.design/wpbookit/versions/change-log"}], "descriptions": [{"lang": "en", "value": "The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'WPB_Profile_controller::handle_image_upload' function in versions up to, and including, 1.6.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:37:56.501Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0357", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:37:56.501Z", "dateReserved": "2025-01-09T07:03:49.584Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-01-25T01:44:36.912Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "WPBookit", "vendor": "Iqonic Design", "versions": [{"lessThanOrEqual": "1.6.9", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:iqonic:wpbookit:*:*:*:*:pro:wordpress:*:*", "matchCriteriaId": "EBC216A2-AE98-47E3-B332-6BE8F3FC99BD", "versionEndExcluding": "1.6.10", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'WPB_Profile_controller::handle_image_upload' function in versions up to, and including, 1.6.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible."}, {"lang": "es", "value": "El complemento WPBookit para WordPress es vulnerable a la carga de archivos arbitrarios debido a una validaci\u00f3n insuficiente del tipo de archivo en la funci\u00f3n 'WPB_Profile_controller::handle_image_upload' en versiones hasta la 1.6.9 y incluida. Esto hace posible que atacantes no autenticados carguen archivos arbitrarios en el servidor del sitio afectado, lo que puede hacer posible la ejecuci\u00f3n remota de c\u00f3digo."}], "id": "CVE-2025-0357", "lastModified": "2026-06-17T08:26:20.537", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-0357", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-01-27T15:34:50.995025Z", "version": "2.0.3"}}]}, "published": "2025-01-25T02:15:26.990", "references": [{"source": "security@wordfence.com", "tags": ["Release Notes"], "url": "https://documentation.iqonic.design/wpbookit/versions/change-log"}, {"source": "security@wordfence.com", "tags": ["Third Party Advisory"], "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/19bf7a68-e76d-4740-9f35-b6084094f59b?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-28T19:11:59.416541+00:00", "value": {"mitigation_remediation": ["Update the WPBookit plugin to the latest available version (1.7 or newer) to remove the upload flaw.", "If an immediate upgrade is not feasible, block the upload endpoint for unauthenticated users using an access control rule or security plugin configuration.", "Configure the web server so that files in the WPBookit upload directory cannot be executed (for example, add SetOptions -ExecCGI to the .htaccess in the plugin\u2019s upload directory)."], "summary": {"action": "Apply Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "Versions of WPBookit up to and including 1.6.9, distributed by Iqonic Design, are affected. The vulnerability exists in the plugin\u2019s handling of image uploads within the WordPress installation where the plugin is active.", "description_and_impact": "The WPBookit plugin for WordPress suffers from insufficient file type validation in its profile image upload routine, which permits an unauthenticated attacker to submit any file to the server. This flaw qualifies as a CWE\u2011434, providing a pathway for arbitrary code execution if a malicious script is uploaded. The official CVSS score of 9.8 indicates a critical level of severity, while the low EPSS score of less than 1 percent suggests that widespread exploitation is currently unlikely but the potential damage is severe.", "risk_and_exploitability": "Despite the low prevalence indicated by the EPSS metric, the high impact score makes this a priority concern. The attack vector is inferred to involve unauthenticated HTTP requests to the upload interface; a successful upload could enable remote code execution on the host. As the vulnerability is not listed in CISA\u2019s KEV catalog, no public exploit has been observed, but the lack of mitigation on many sites leaves them open to potential future attacks."}}}}, "created": "2026-04-28T19:15:25.455798+00:00", "updated": "2026-04-28T19:15:25.455808+00:00", "vendors": []}