| Assigner | Wordfence |
| Reserved | 2024-03-27 |
| Published | 2024-04-04 |
| Updated | 2024-06-20 |
Description
The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in the 'bookingpress_process_upload' function in all versions up to, and including 1.0.87. This allows an authenticated attacker with administrator-level capabilities or higher to upload arbitrary files on the affected site's server, enabling remote code execution.
| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Problem types
CWE-434 Unrestricted Upload of File with Dangerous Type
Product status
*
Timeline
| 2024-04-03: | Disclosed |
Credits
Dian Sun
