Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: soportecibeles Clear all filters
TI-2025-12820 CVE-2025-14030 · GHSA-28cp-rjg9-r8c3

AI Feeds <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aife_post_meta' Shortcode

Priority LOW 28

The AI Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'aife_post_meta' shortcode in all versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00223 Published 2025-12-12 No fix listed CWE-79
TI-2025-12425 CVE-2025-13597 · GHSA-396j-x662-w9g8

AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 51

The AI Feeds plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.0.11.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01049 Published 2025-11-25 No fix listed CWE-434
TI-2025-12423 CVE-2025-13595 · GHSA-jfjj-m6rg-hvmq

CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 51

The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.10.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01049 Published 2025-11-25 No fix listed CWE-434