CVE-2025-2006

The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the file uploading functionality in all versions up to, and including, 1.1.19. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. This may be exploitable by unauthenticated attackers when the "Allow guest users without accounts to create topics and replies" setting is enabled.

• CWE-434

• https://plugins.trac.wordpress.org/browser/image-upload-for-bbpress/tags/1.1.19/bbp-image-upload.php#L136
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3264738%40image-upload-for-bbpress&new=3264738%40image-upload-for-bbpress&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/df09af41-399a-4878-8420-721f1198d895?source=cve

Published

Mar 29, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20054Uncaught exception in the core management mechanism for some…6.8
• CVE-2025-20055OS command injection vulnerability exists in network storage…9.8
• CVE-2025-20056Improper input validation for some Intel VTune Profiler befo…4.8
• CVE-2025-20057Uncontrolled resource consumption for some Edge Orchestrator…5.1
• CVE-2025-20058When a BIG-IP message routing profile is configured on a vir…8.9
• CVE-2025-20059Relative Path Traversal vulnerability in Ping Identity PingA…9.2
• CVE-2025-20060An attacker could expose cross-user personal identifiable in…8.7
• CVE-2025-20061mySCADA myPRO does not properly neutralize POST requests sen…9.8
• CVE-2025-20062Use after free for some Intel(R) PROSet/Wireless WiFi Softwa…7
• CVE-2025-20063in OpenHarmony v5.0.3 and prior versions allow a local attac…5.5
• CVE-2025-20064Improper input validation in the UEFI FlashUcAcmSmm module f…8.7
• CVE-2025-20065Uncontrolled search path for some Display Virtualization for…6.7