PatchTheCVEwpbookit vulnerabilities and fixes
Recent CVEs affecting wpbookit, with upgrade or downgrade steps. 9 tracked.
wpbookit has 9 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 9. Most recent: 2025-07-12. Highest priority: CVE-2025-6058 (score 66/100).
- CVE-2025-6058 CRITICAL 9.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation
- CVE-2025-6057 HIGH 8.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation
- CVE-2025-3811 CRITICAL 9.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions u
- CVE-2025-3810 CRITICAL 9.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions u
- CVE-2025-32254 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Iqonic Design WPBookit wpbookit allows Accessing Functionality Not Prop
- CVE-2025-26910 HIGH 7.1 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Iqonic Design WPBookit wpbookit allows Stored XSS.This issu
- CVE-2025-0357 CRITICAL 9.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type valida
- CVE-2024-54280 CRITICAL 9.3 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic D
- CVE-2024-10215 CRITICAL 9.8 UPGRADE The WPBookit plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and inclu
FAQ
How do I fix wpbookit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wpbookit being exploited right now?
None of the tracked wpbookit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wpbookit CVE should I patch first?
CVE-2025-6058 currently ranks highest (66/100): The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation .