Critical · published April 19, 2022
🔥 An attacker can upload a PHP shell through a simple form in the VikBooking Hotel Booking Engine—no login required! Think of it as a hotel check-in where the front desk never verifies the ID of guests checking in, letting anyone drop off a package without question. It turns out, the box could be full of dangerous surprises! This could lead to full remote code execution, allowing attackers to run any malicious code they please. They could steal sensitive data, take control of the server, or even launch attacks on other systems—all from a deceptively innocent upload!
Think of it as a hotel check-in where the front desk never verifies the ID of guests checking in, letting anyone drop off a package without question. It turns out, the box could be full of dangerous surprises! The vulnerability exists in the VikBooking plugin for WordPress, allowing arbitrary file uploads through a poorly secured signature upload feature in the booking form. Attackers can exploit this to upload and execute PHP files, gaining control over the server.
This could lead to full remote code execution, allowing attackers to run any malicious code they please. They could steal sensitive data, take control of the server, or even launch attacks on other systems—all from a deceptively innocent upload! Update the VikBooking plugin to version 1.5.4 immediately to close this critical vulnerability. Additionally, implement file type validations to restrict uploads to safe formats and regularly audit your plugins for security issues. You've got this! By following these steps, you can secure your site and keep those unwelcome guests out! 🛡️