Skip to content
OpenAdvisories

Vendor

soportecibeles

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-13597 Public exploit

    AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload

    The AI Feeds plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.0.11. This makes it possible for unauthenticated attackers to download arbitra…

  • Critical 9.8
    CVE-2025-13595 Public exploit

    CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload

    The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.10.8. This makes it possible for unauthenticated attackers to download arbit…