Description
WPBookit 是一个用于 WordPress 的插件，旨在为用户提供在线预订和预约功能。WPBookit 版本 1.0.4 及以下版本在 /wp-admin/admin-ajax.php 接口中存在文件上传漏洞。未经身份验证的攻击者可以利用该漏洞上传恶意文件，从而在受影响的服务器上执行任意代码。
WordPress WPBookit <= 1.0.4 /wp-admin/admin-ajax.php 文件上传漏洞 （CVE-2025-6058）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-6058
https://github.com/Nxploited/CVE-2025-6058
https://www.wordfence.com/threat-intel/vulnerabilities/id/1d779ad1-fdbe-444c-85c5-99146a1a03d8?source=cve
https://plugins.trac.wordpress.org/browser/wpbookit/trunk/core/admin/classes/controllers/class.wpb-booking-type-controller.php#L455
https://zhuanlan.zhihu.com/p/1976184152035451716
https://access.redhat.com/security/cve/cve-2025-6058
https://hossted.com/knowledge-base/newsflash/business-and-enterprise-solutions/cms/wordpress-arbitrary-file-upload-vulnerability/
https://hackhalt.com/threat/cve-2025-6058/