CVE-2025-0357

Summary

CVE-2025-0357 is a critical vulnerability affecting the WPBookit plugin for WordPress. The issue lies within the 'WPB_Profile_controller::handle_image_upload' function, which fails to adequately validate file types in versions 1.6.9 and below. This defect enables unauthenticated attackers to upload arbitrary files onto the targeted site's server. The potential repercussions of this vulnerability include remote code execution, posing a significant security risk. WordPress users are advised to update the WPBookit plugin to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.