CVE-2025-12973

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12973", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-11-10T18:15:08.875Z", "datePublished": "2025-11-21T16:28:13.751Z", "dateUpdated": "2026-04-08T17:14:56.115Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:14:56.115Z"}, "affected": [{"vendor": "oc3dots", "product": "S2B AI Assistant \u2013 ChatBot, AI Agents, ChatGPT API, Image Generator", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.7.8", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The S2B AI Assistant \u2013 ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeFile() function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."}], "title": "S2B AI Assistant \u2013 ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.8 - Authenticated (Editor+) Arbitrary File Upload", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ac9d2b64-aff6-418a-bfe7-ec91b177ad6b?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/s2b-ai-assistant/trunk/lib/helpers/Utils.php"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3399267%40s2b-ai-assistant&new=3399267%40s2b-ai-assistant&sfp_email=&sfph_mail="}, {"url": "https://github.com/d0n601/CVE-2025-12973"}, {"url": "https://ryankozak.com/posts/cve-2025-12973/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "cweId": "CWE-434", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "Ryan Kozak"}], "timeline": [{"time": "2025-11-19T16:23:10.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-11-20T16:50:38.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-21T16:39:50.851634Z", "id": "CVE-2025-12973", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-21T16:40:01.375Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-12973", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-11-21T16:39:50.851634Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-21T16:39:56.803Z"}}], "cna": {"title": "S2B AI Assistant \u2013 ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.8 - Authenticated (Editor+) Arbitrary File Upload", "credits": [{"lang": "en", "type": "finder", "value": "Ryan Kozak"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "oc3dots", "product": "S2B AI Assistant \u2013 ChatBot, AI Agents, ChatGPT API, Image Generator", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.7.8"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-11-19T16:23:10.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-11-20T16:50:38.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ac9d2b64-aff6-418a-bfe7-ec91b177ad6b?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/s2b-ai-assistant/trunk/lib/helpers/Utils.php"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3399267%40s2b-ai-assistant&new=3399267%40s2b-ai-assistant&sfp_email=&sfph_mail="}, {"url": "https://github.com/d0n601/CVE-2025-12973"}, {"url": "https://ryankozak.com/posts/cve-2025-12973/"}], "descriptions": [{"lang": "en", "value": "The S2B AI Assistant \u2013 ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeFile() function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:14:56.115Z"}}}, "cveMetadata": {"cveId": "CVE-2025-12973", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:14:56.115Z", "dateReserved": "2025-11-10T18:15:08.875Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-21T16:28:13.751Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "S2B AI Assistant \u2013 ChatBot, AI Agents, ChatGPT API, Image Generator", "vendor": "oc3dots", "versions": [{"lessThanOrEqual": "1.7.8", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The S2B AI Assistant \u2013 ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeFile() function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."}, {"lang": "es", "value": "El plugin S2B AI Assistant - ChatBot, ChatGPT, OpenAI, Content & Image Generator para WordPress es vulnerable a subidas arbitrarias de archivos debido a la falta de validaci\u00f3n del tipo de archivo en la funci\u00f3n storeFile() en todas las versiones hasta la 1.7.8, inclusive. Esto hace posible que atacantes autenticados, con acceso de nivel Editor y superior, suban archivos arbitrarios en el servidor del sitio afectado, lo que puede hacer posible la ejecuci\u00f3n remota de c\u00f3digo."}], "id": "CVE-2025-12973", "lastModified": "2026-10-08T10:10:00.227", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-12973", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-11-21T16:39:50.851634Z", "version": "2.0.3"}}]}, "published": "2025-11-21T17:15:50.267", "references": [{"source": "security@wordfence.com", "url": "https://github.com/d0n601/CVE-2025-12973"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/s2b-ai-assistant/trunk/lib/helpers/Utils.php"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3399267%40s2b-ai-assistant&new=3399267%40s2b-ai-assistant&sfp_email=&sfph_mail="}, {"source": "security@wordfence.com", "url": "https://ryankozak.com/posts/cve-2025-12973/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ac9d2b64-aff6-418a-bfe7-ec91b177ad6b?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T18:03:34.966532+00:00", "value": {"mitigation_remediation": ["Apply the most recent official update to the S2B AI Assistant plugin after the vendor releases a fix for the file\u2011type validation flaw.", "If a patch is not yet available, disable the plugin or remove Editor users from any role that grants file upload capability to prevent further uploads.", "Configure the server (e.g., via .htaccess or server block) to disallow execution of files in the plugin\u2019s upload directory, ensuring uploaded content cannot run as code."], "summary": {"action": "Patch Plugin", "impact": "Remote Code Execution via Arbitrary File Upload"}, "threat_synthesis": {"affected_systems": "The vulnerability affects all versions of the S2B AI Assistant \u2013 ChatBot, AI Agents, ChatGPT API, Image Generator plugin released by oc3dots, specifically the variants for WordPress that are version 1.7.8 or older. No other versions or products are listed as affected.", "description_and_impact": "The S2B AI Assistant \u2013 ChatBot plugin for WordPress allows authenticated users with Editor role or higher to upload files without validating file type. The storeFile() function accepts any file, so an attacker can upload a malicious script, application, or binary onto the server. If the uploaded file is later executed, it can lead to remote code execution, compromising site integrity and potentially the entire hosting environment.", "risk_and_exploitability": "The CVSS score of 7.2 indicates a high severity for this issue. Because the EPSS score is lower than 1%, immediate exploitation is unlikely, and the vulnerability is not currently listed in the CISA KEV catalog. However, evidence from the description shows that an authenticated attacker with Editor-level access can upload arbitrary files, and if that file is executable on the server, remote code execution becomes possible. The risk is confined to systems where the plugin is installed and the upload directory is within the WordPress file system."}}}}, "created": "2025-11-24T09:07:51.972771+00:00", "updated": "2026-04-21T18:15:36.365070+00:00", "vendors": ["oc3dots", "oc3dots$PRODUCT$s2b_ai_assistant", "wordpress", "wordpress$PRODUCT$wordpress"]}