PT-2025-48093
CVE-2025-13595
·
Published
2025-11-25
·
Updated
2025-12-01
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CIBELES AI plugin for WordPress versions through 1.10.8
Description
The CIBELES AI plugin for WordPress has a flaw that allows unauthorized file uploads. This is due to a missing check for appropriate permissions within the
actualizador git.php file. An attacker could exploit this to download arbitrary GitHub repositories and overwrite plugin files on the server, potentially leading to remote code execution.Recommendations
Update the CIBELES AI plugin to a version newer than 1.10.8.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾