Horizon Alert
Summary of the vulnerability and why it matters
A flaw in the BookingPress Pro WordPress plugin allows unauthenticated attackers to upload arbitrary files. This is concerning because such uploads could potentially lead to the execution of malicious code on your website's server.
- Attackers can upload any file type.
- This impacts sites using specific booking forms.
- Remote code execution is a possible outcome.
Attack Path
How an attacker could exploit the issue
An unauthenticated attacker can upload arbitrary files to a WordPress site by exploiting a weakness in the BookingPress Pro plugin. This is possible if the site has a booking form with a signature custom field enabled, allowing the attacker to upload a web shell or other malicious file for remote code execution.
- No authentication required.
- Targets booking forms.
- Requires signature custom field.
Live Threat
Current exploitation, exposure, and threat context
Attackers are likely to target this vulnerability because it exists in a widely used WordPress plugin that handles public-facing forms, creating a broad attack surface. The potential for arbitrary file uploads can lead to remote code execution, a highly desirable outcome for attackers. While the vulnerability is present, its exploitation requires an additional conditional setup: the addition of a signature custom field to the booking form.
- Exploitable with unauthenticated access.
- Public exploit code is available.
- Vulnerability is recent.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
Prioritize blocking network access to BookingPress Pro instances that have signature custom fields enabled. Actively scan for signs of unauthorized file uploads, especially in WordPress logs and web server access logs. If exploitation is detected, immediately isolate the affected WordPress sites from the network to prevent further compromise.
- Identify and block external traffic.
- Monitor for malicious file uploads.
- Isolate affected services if exploited.
