CVE-2025-13595

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-13595", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-11-24T07:27:39.142Z", "datePublished": "2025-11-25T22:28:36.431Z", "dateUpdated": "2026-04-08T17:16:50.477Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:16:50.477Z"}, "affected": [{"vendor": "soportecibeles", "product": "CIBELES AI", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.10.8", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.10.8. This makes it possible for unauthenticated attackers to download arbitrary GitHub repositories and overwrite plugin files on the affected site's server which may make remote code execution possible."}], "title": "CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b3e89a1c-7606-4391-a389-fa18d0967046?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/cibeles-ai/trunk/actualizador_git.php#L1"}, {"url": "https://plugins.trac.wordpress.org/changeset/3402311/cibeles-ai"}, {"url": "https://github.com/d0n601/CVE-2025-13595"}, {"url": "https://ryankozak.com/posts/cve-2025-13595/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "cweId": "CWE-434", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "type": "finder", "value": "Ryan Kozak"}], "timeline": [{"time": "2025-11-24T13:55:18.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-11-25T09:39:40.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-26T14:53:55.463056Z", "id": "CVE-2025-13595", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-26T14:54:23.647Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-13595", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-11-26T14:53:55.463056Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-26T14:54:20.579Z"}}], "cna": {"title": "CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload", "credits": [{"lang": "en", "type": "finder", "value": "Ryan Kozak"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "soportecibeles", "product": "CIBELES AI", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "1.10.8"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-11-24T13:55:18.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-11-25T09:39:40.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b3e89a1c-7606-4391-a389-fa18d0967046?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/cibeles-ai/trunk/actualizador_git.php#L1"}, {"url": "https://plugins.trac.wordpress.org/changeset/3402311/cibeles-ai"}, {"url": "https://github.com/d0n601/CVE-2025-13595"}, {"url": "https://ryankozak.com/posts/cve-2025-13595/"}], "descriptions": [{"lang": "en", "value": "The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.10.8. This makes it possible for unauthenticated attackers to download arbitrary GitHub repositories and overwrite plugin files on the affected site's server which may make remote code execution possible."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-11-25T22:28:36.431Z"}}}, "cveMetadata": {"cveId": "CVE-2025-13595", "state": "PUBLISHED", "dateUpdated": "2025-11-26T14:54:23.647Z", "dateReserved": "2025-11-24T07:27:39.142Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-25T22:28:36.431Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "CIBELES AI", "vendor": "soportecibeles", "versions": [{"lessThanOrEqual": "1.10.8", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.10.8. This makes it possible for unauthenticated attackers to download arbitrary GitHub repositories and overwrite plugin files on the affected site's server which may make remote code execution possible."}, {"lang": "es", "value": "El plugin CIBELES AI para WordPress es vulnerable a la carga arbitraria de archivos debido a la falta de una verificaci\u00f3n de capacidad en el archivo 'actualizador_git.php' en todas las versiones hasta la 1.10.8, inclusive. Esto permite a atacantes no autenticados descargar repositorios arbitrarios de GitHub y sobrescribir archivos del plugin en el servidor del sitio afectado, lo que podr\u00eda hacer posible la ejecuci\u00f3n remota de c\u00f3digo."}], "id": "CVE-2025-13595", "lastModified": "2026-10-18T20:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13595", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-11-26T14:53:55.463056Z", "version": "2.0.3"}}]}, "published": "2025-11-25T23:15:46.213", "references": [{"source": "security@wordfence.com", "url": "https://github.com/d0n601/CVE-2025-13595"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/cibeles-ai/trunk/actualizador_git.php#L1"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3402311/cibeles-ai"}, {"source": "security@wordfence.com", "url": "https://ryankozak.com/posts/cve-2025-13595/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b3e89a1c-7606-4391-a389-fa18d0967046?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T17:57:19.144742+00:00", "value": {"mitigation_remediation": ["Upgrade the CIBELES AI plugin to the latest version that includes the missing capability check; if no update is available, uninstall the plugin entirely.", "Configure the web server or .htaccess file to block direct access to actualizador_git.php or require authentication for that endpoint to prevent unauthorized uploads.", "Implement a file\u2011type validation policy that accepts only trusted file types for WordPress uploads and monitor the plugin directory for unexpected changes to detect possible exploitation attempts."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "WordPress sites that have installed the CIBELES AI plugin version 1.10.8 or earlier, supplied by the vendor soportecibeles, are affected. These legacy versions are still deployed on many production sites.", "description_and_impact": "The CIBELES AI WordPress plugin contains an unchecked file\u2011upload endpoint that allows any visitor to upload arbitrary files, a weakness classified as CWE\u2011434. Because the plugin can download any GitHub repository and overwrite its own files, an attacker could inject malicious PHP code to gain full control of the site, exfiltrate data, and establish persistence.", "risk_and_exploitability": "The CVSS score of 9.8 categorizes this defect as Critical, while the EPSS score of less than 1% indicates a low current exploitation probability. The vulnerability can be leveraged by unauthenticated users; if exploited, remote code execution is possible. The plugin is not listed in CISA\u2019s KEV catalog, but the severity warrants high\u2011priority attention."}}}}, "created": "2025-11-27T09:45:46.365601+00:00", "updated": "2026-04-21T18:00:11.746388+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress"]}