PT-2025-48093 · WordPress · Cibeles Ai

Ryan Kozak · Published 2025-11-25 · Updated 2025-12-01 · CVE-2025-13595

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CIBELES AI plugin for WordPress versions through 1.10.8

Description The CIBELES AI plugin for WordPress has a flaw that allows unauthorized file uploads. This is due to a missing check for appropriate permissions within the actualizador git.php file. An attacker could exploit this to download arbitrary GitHub repositories and overwrite plugin files on the server, potentially leading to remote code execution.

Recommendations Update the CIBELES AI plugin to a version newer than 1.10.8.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-13595

Affected Products

Cibeles Ai

References · 13

• 🔥 https://github.com/d0n601/CVE-2025-13595 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-13595 · Security Note
• https://twitter.com/MNovofastovsky/status/1994041015779340465 · Twitter Post
• https://plugins.trac.wordpress.org/changeset/3402311/cibeles-ai · Note
• https://plugins.trac.wordpress.org/browser/cibeles-ai/trunk/actualizador_git.php#L1 · Note
• https://twitter.com/CveFindCom/status/1993495237667266759 · Twitter Post
• https://t.me/cveNotify/144027 · Telegram Post
• https://ryankozak.com/posts/cve-2025-13595 · Note
• https://twitter.com/CVEnew/status/1993452589447323868 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/b3e89a1c-7606-4391-a389-fa18d0967046?source=cve · Note
• https://t.me/cveNotify/144429 · Telegram Post
• https://t.me/CVEtracker/38237 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1993599004358127821 · Twitter Post