CVE-2025-11256

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-11256", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-10-03T12:13:35.865Z", "datePublished": "2025-10-18T07:26:31.541Z", "dateUpdated": "2026-04-08T16:40:26.905Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:40:26.905Z"}, "affected": [{"vendor": "kognetiks", "product": "Kognetiks Chatbot for WordPress", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.3.5", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.3.5. This makes it possible for unauthenticated attackers to upload limited safe files and erase conversations."}], "title": "Kognetiks Chatbot <= 2.3.5 - Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c8fe389-ff44-4be3-889b-0006977f4f3c?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3380317%40chatbot-chatgpt&new=3380317%40chatbot-chatgpt&sfp_email=&sfph_mail="}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3380313%40chatbot-chatgpt&new=3380313%40chatbot-chatgpt&sfp_email=&sfph_mail="}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-285 Improper Authorization", "cweId": "CWE-285", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "timeline": [{"time": "2025-10-07T14:33:52.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-10-17T19:09:49.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-20T17:37:23.344596Z", "id": "CVE-2025-11256", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-20T17:38:56.102Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-11256", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-20T17:37:23.344596Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-20T17:37:28.978Z"}}], "cna": {"title": "Kognetiks Chatbot <= 2.3.5 - Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing", "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "kognetiks", "product": "Kognetiks Chatbot for WordPress", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.3.5"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-07T14:33:52.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-10-17T19:09:49.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c8fe389-ff44-4be3-889b-0006977f4f3c?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3380317%40chatbot-chatgpt&new=3380317%40chatbot-chatgpt&sfp_email=&sfph_mail="}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3380313%40chatbot-chatgpt&new=3380313%40chatbot-chatgpt&sfp_email=&sfph_mail="}], "descriptions": [{"lang": "en", "value": "The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.3.5. This makes it possible for unauthenticated attackers to upload limited safe files and erase conversations."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-285", "description": "CWE-285 Improper Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:40:26.905Z"}}}, "cveMetadata": {"cveId": "CVE-2025-11256", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:40:26.905Z", "dateReserved": "2025-10-03T12:13:35.865Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-10-18T07:26:31.541Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Kognetiks Chatbot for WordPress", "vendor": "kognetiks", "versions": [{"lessThanOrEqual": "2.3.5", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.3.5. This makes it possible for unauthenticated attackers to upload limited safe files and erase conversations."}, {"lang": "es", "value": "El plugin Kognetiks Chatbot para WordPress es vulnerable a la modificaci\u00f3n no autorizada de datos debido a una falta de verificaci\u00f3n de capacidad en varias funciones en todas las versiones hasta la 2.3.5, inclusive. Esto hace posible que atacantes no autenticados suban archivos seguros limitados y borren conversaciones."}], "id": "CVE-2025-11256", "lastModified": "2026-10-08T22:10:00.563", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11256", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-20T17:37:23.344596Z", "version": "2.0.3"}}]}, "published": "2025-10-18T08:15:33.660", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3380313%40chatbot-chatgpt&new=3380313%40chatbot-chatgpt&sfp_email=&sfph_mail="}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3380317%40chatbot-chatgpt&new=3380317%40chatbot-chatgpt&sfp_email=&sfph_mail="}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c8fe389-ff44-4be3-889b-0006977f4f3c?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-285"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-27T23:38:23.595303+00:00", "value": {"mitigation_remediation": ["Update the Kognetiks Chatbot plugin to the latest version that includes the missing capability check fix.", "Configure the web server or a security plugin to block unauthenticated access to the plugin\u2019s upload and conversation\u2011deletion endpoints, thereby preventing unauthorized use of these functions.", "Scan the site for any unexpected or unauthenticated uploaded files and remove them, and restore critical conversation data from backups if available."], "summary": {"action": "Apply Patch", "impact": "Unauthorized File Upload and Conversation Deletion"}, "threat_synthesis": {"affected_systems": "WordPress installations that use the Kognetiks Chatbot plugin, versions 2.3.5 and earlier, are impacted by this vulnerability.", "description_and_impact": "The Kognetiks Chatbot WordPress plugin permits attackers without authentication to bypass authorization checks and upload a restricted set of files that the plugin deems safe. In addition, an unauthenticated attacker can invoke the delete function to erase all stored conversation data. This missing capability verification is a classic unauthorized access flaw, classified as CWE\u2011285, allowing data modification and loss of user interactions, which may compromise confidentiality or disrupt service continuity.", "risk_and_exploitability": "The CVSS score of 5.3 indicates moderate severity, while an EPSS score of less than 1% suggests a very low likelihood of exploitation. The flaw is not currently listed in the CISA KEV catalog, meaning it has not been widely observed in the wild. Attackers can exploit the issue unauthenticated through web requests to the plugin\u2019s upload or conversation\u2011erase endpoints, and doing so requires only internet access to the affected WordPress site."}}}}, "created": "2025-10-20T13:21:33.209665+00:00", "updated": "2026-04-27T23:45:15.890200+00:00", "vendors": ["kognetiks", "kognetiks$PRODUCT$chatbot", "wordpress", "wordpress$PRODUCT$wordpress"]}