PT-2025-47787
CVE-2025-12973
·
Published
2025-11-20
·
Updated
2026-10-08
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress versions through 1.7.8
Description
The software is susceptible to arbitrary file uploads because of a lack of file type validation within the
storeFile() function. This allows attackers with Editor-level access or higher to upload any file type onto the server, potentially leading to remote code execution.Recommendations
Update the S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress to a version later than 1.7.8.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾