CVE-2025-0357 | Iqonic Design WPBookit Plugin up to 1.6.9 on WordPress handle_image_upload unrestricted upload

A vulnerability classified as critical has been found in Iqonic Design WPBookit Plugin up to 1.6.9 on WordPress. This affects the function WPB_Profile_controller::handle_image_upload. The manipulation leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2025-0357. It is possible to initiate the attack remotely. There is no exploit available.