Arbitrary File Upload Vulnerability in BeeTeam368 Extensions Plugin for WordPress

CVE-2025-6423

What is CVE-2025-6423?

The BeeTeam368 Extensions plugin for WordPress is susceptible to arbitrary file uploads due to inadequate file type validation within the handle_submit_upload_file() function. This weakness allows authenticated users with Subscriber-level access or higher to upload malicious files to the server. Once uploaded, these files could potentially be exploited for remote code execution, posing a significant threat to the security of affected WordPress sites.

References