Read the docs

soportecibeles

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

soportecibeles records in CISA KEV

No soportecibeles vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-12425 CVE-2025-13597 · GHSA-396j-x662-w9g8

AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 51

The AI Feeds plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.0.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01049 Published 2025-11-25 No fix listed CWE-434
TI-2025-12423 CVE-2025-13595 · GHSA-jfjj-m6rg-hvmq

CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 51

The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.10.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01049 Published 2025-11-25 No fix listed CWE-434
TI-2025-12820 CVE-2025-14030 · GHSA-28cp-rjg9-r8c3

AI Feeds <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aife_post_meta' Shortcode

Priority LOW 28

The AI Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'aife_post_meta' shortcode in all versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00223 Published 2025-12-12 No fix listed CWE-79
Open these records in search →