CVE-2025-6423 – BeeTeam368 Extensions WordPress Arbitrary File Upload Vulnerability

CVE ID : CVE-2025-6423

Published : July 12, 2025, 8:15 a.m. | 2 hours, 2 minutes ago

Description : The BeeTeam368 Extensions plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_submit_upload_file() function in all versions up to, and including, 2.3.5. This makes it possible for authenticated attackers with Subscriber-level access or higher to upload arbitrary files on the affected site’s server which may make remote code execution possible.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…