（CVE-2025-6058）WPBookit插件任意文件上传漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-6058
• https://www.wordfence.com/threat-intel/vulnerabilities/id/1d779ad1-fdbe-444c-85c5-99146a1a03d8?source=cve
• https://github.com/Nxploited/CVE-2025-6058
• https://github.com/0xgh057r3c0n/CVE-2025-6058
• https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wpbookit
• https://access.redhat.com/security/cve/cve-2025-6058
• https://hackhalt.com/threat/cve-2025-6058/
• https://www.ameeba.com/blog/cve-2025-6058-critical-arbitrary-file-upload-vulnerability-in-wpbookit-wordpress-plugin/
• https://zhuanlan.zhihu.com/p/1976184152035451716
• https://plugins.trac.wordpress.org/browser/wpbookit/trunk/core/admin/classes/controllers/class.wpb-booking-type-controller.php#L455

Related Vulnerabilities

• PoCCVE-2026-1980: WPBookit <= 1.0.8 - Unauthenticated Customer Information Disclosure
• PoCCVE-2025-6058: WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload
• WordPress WPBookit <= 1.0.4 /wp-admin/admin-ajax.php 文件上传漏洞 （CVE-2025-6058）