CVE-2025-11576

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-11576", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-10-09T23:55:23.529Z", "datePublished": "2025-10-24T12:29:56.573Z", "dateUpdated": "2026-04-08T16:52:18.410Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:52:18.410Z"}, "affected": [{"vendor": "newcodebyte", "product": "AI Chatbot Free Models \u2013 Customer Support, Live Chat, Virtual Assistant", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.6.5", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The AI Chatbot Free Models \u2013 Customer Support, Live Chat, Virtual Assistant plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.6.5. This is due to insufficient sanitization in the 'newcodebyte_chatbot_export_messages' function. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration."}], "title": "AI Chatbot Free Models \u2013 Customer Support, Live Chat, Virtual Assistant <= 1.6.5 - Unauthenticated CSV Injection", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5064873b-e70a-4fe6-8c5c-ced6025aaa5f?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3378450/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-1236 Improper Neutralization of Formula Elements in a CSV File", "cweId": "CWE-1236", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "timeline": [{"time": "2025-10-13T21:23:46.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-10-23T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-24T12:48:17.739856Z", "id": "CVE-2025-11576", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-24T12:48:31.982Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-11576", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-24T12:48:17.739856Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-24T12:48:27.529Z"}}], "cna": {"title": "AI Chatbot Free Models \u2013 Customer Support, Live Chat, Virtual Assistant <= 1.6.5 - Unauthenticated CSV Injection", "credits": [{"lang": "en", "type": "finder", "value": "Jonas Benjamin Friedli"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "newcodebyte", "product": "AI Chatbot Free Models \u2013 Customer Support, Live Chat, Virtual Assistant", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.6.5"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-13T21:23:46.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-10-23T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5064873b-e70a-4fe6-8c5c-ced6025aaa5f?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3378450/"}], "descriptions": [{"lang": "en", "value": "The AI Chatbot Free Models \u2013 Customer Support, Live Chat, Virtual Assistant plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.6.5. This is due to insufficient sanitization in the 'newcodebyte_chatbot_export_messages' function. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1236", "description": "CWE-1236 Improper Neutralization of Formula Elements in a CSV File"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:52:18.410Z"}}}, "cveMetadata": {"cveId": "CVE-2025-11576", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:52:18.410Z", "dateReserved": "2025-10-09T23:55:23.529Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-10-24T12:29:56.573Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "AI Chatbot Free Models \u2013 Customer Support, Live Chat, Virtual Assistant", "vendor": "newcodebyte", "versions": [{"lessThanOrEqual": "1.6.5", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The AI Chatbot Free Models \u2013 Customer Support, Live Chat, Virtual Assistant plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.6.5. This is due to insufficient sanitization in the 'newcodebyte_chatbot_export_messages' function. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration."}, {"lang": "es", "value": "El plugin AI Chatbot Free Models - Customer Support, Live Chat, Virtual Assistant para WordPress es vulnerable a Inyecci\u00f3n CSV en todas las versiones hasta la 1.6.5, inclusive. Esto se debe a una sanitizaci\u00f3n insuficiente en la funci\u00f3n newcodebyte_chatbot_export_messages. Esto hace posible que atacantes no autenticados incrusten entradas no confiables en archivos CSV exportados, lo que puede resultar en ejecuci\u00f3n de c\u00f3digo cuando estos archivos se descargan y abren en un sistema local con una configuraci\u00f3n vulnerable."}], "id": "CVE-2025-11576", "lastModified": "2026-10-08T11:10:00.250", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-11576", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-24T12:48:17.739856Z", "version": "2.0.3"}}]}, "published": "2025-10-24T13:15:46.203", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3378450/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5064873b-e70a-4fe6-8c5c-ced6025aaa5f?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1236"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T12:38:19.449894+00:00", "value": {"mitigation_remediation": ["Update the plugin to the latest version once a fix is available", "Remove or restrict the CSV export feature for public users, making it available only to trusted administrators", "Implement or configure server\u2011side sanitization to strip leading '=', '+', '-', or '@' characters from exported data"], "summary": {"action": "Assess Impact", "impact": "Code Execution via CSV Injection"}, "threat_synthesis": {"affected_systems": "Affected systems are WordPress sites running the AI Chatbot Free Models \u2013 Customer Support, Live Chat, Virtual Assistant plugin version 1.6.5 or earlier. No specific patch version is listed in the data.", "description_and_impact": "The vulnerability is an unauthenticated CSV injection flaw in the export function of the AI Chatbot Free Models \u2013 Customer Support, Live Chat, Virtual Assistant plugin. The flaw allows an attacker to inject untrusted input into exported CSV files, which may be interpreted by spreadsheet software as executable formulas. This could lead to remote code execution on a client machine that opens the file. The weakness is categorized as CWE\u20111236, insufficient sanitization of user-controlled data.", "risk_and_exploitability": "The CVSS score of 4.3 indicates a moderate severity. The EPSS score of less than 1% suggests a very low probability of exploitation in the wild. The vulnerability is not listed in CISA\u2019s KEV catalog. The attack vector is likely through the public export endpoint, allowing any unauthenticated user to trigger the CSV generation and embed malicious payloads."}}}}, "created": "2025-10-27T22:10:33.345628+00:00", "updated": "2026-04-22T12:45:17.024701+00:00", "vendors": ["newcodebyte", "newcodebyte$PRODUCT$ai_chatbot_free_models", "wordpress", "wordpress$PRODUCT$wordpress"]}