External risk intelligence

CIBELES AI Plugin for WordPress Arbitrary File Upload Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 9.8)

CVE-2025-13595

The vulnerability affects a WordPress plugin, which by definition runs on a public-facing web server. Because the vulnerability allows for unauthenticated file uploads, the attack surface is directly exposed to the internet as part of the normal operation of a public web application.

Unrestricted File Upload

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A critical vulnerability has been identified in a WordPress plugin that allows for arbitrary file uploads. This could enable attackers to overwrite critical plugin files, potentially leading to the execution of malicious code on affected servers. The primary concern is to confirm if this plugin is in use and assess any exposure.

Unauthenticated file uploads can overwrite critical plugin code.
Confirms if the plugin is in use and assess exposure.
Critical issue requires understanding relevance and potential impact.

Attack Path

How an attacker could exploit the issue

An attacker can target websites using the CIBELES AI plugin for WordPress by exploiting a flaw in the 'actualizador_git.php' file. This vulnerability allows unauthenticated individuals to download arbitrary GitHub repositories, potentially overwriting critical plugin files on the server. If successful, this could lead to remote code execution on the affected site.

No authentication is needed.
Uploading arbitrary files triggers the vulnerability.
Risk of remote code execution.

Live Threat

Current exploitation, exposure, and threat context

This vulnerability could affect WordPress sites using the CIBELES AI plugin by allowing unauthenticated attackers to download arbitrary GitHub repositories and overwrite plugin files. When supported by the advisory, this could lead to remote code execution on the server.

Plugin files and server code.
Unauthenticated arbitrary file uploads.
Potential remote code execution.

Operational Fix

Recommended remediation, mitigation, and detection steps

The owner of this WordPress plugin, likely an application owner or platform team, must first confirm the plugin's presence and exposure on public-facing servers. Confirming reachability and business criticality will inform prioritization, followed by coordinating with the vendor and planning remediation during the next maintenance window.

Plugin owners must address the vulnerability.
Verify plugin reachability and business impact.
Coordinate vendor fix and plan remediation.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the CIBELES AI plugin for WordPress?

The CIBELES AI plugin is an add-on for WordPress websites designed to integrate artificial intelligence features. It allows site administrators to enhance their platform's functionality, often by fetching or updating code directly from external repositories like GitHub. Because it operates within the WordPress environment, it handles server-side processes that interact with the site's file system.

How does CVE-2025-13595 cause a security risk?

This vulnerability is classified as an Unrestricted Upload of File with Dangerous Type (CWE-434). Essentially, the plugin lacks the necessary permission checks to verify who is interacting with its update functions. This allows an attacker to bypass security and force the server to download external files and overwrite existing plugin code, potentially leading to unauthorized remote code execution.

What action triggers this vulnerability?

The vulnerability is triggered when an attacker sends a request to the 'actualizador_git.php' file, which is intended to handle repository updates. Since there is no authentication mechanism, the script executes the requested file download or overwrite commands automatically. Legitimate site operations that do not invoke this specific file or its update functions will not trigger the flaw.

Why is this plugin considered internet-facing?

According to Halo Surface Signal, this vulnerability is highly relevant because WordPress plugins are inherently designed to run on public-facing web servers. Since the plugin is accessible to any visitor or automated scanner via the web, an attacker does not need internal network access to reach the vulnerable 'actualizador_git.php' file; it is exposed by the nature of hosting a public website.

What are the first steps to secure a site using this plugin?

You should immediately verify if the CIBELES AI plugin is installed on your WordPress environment. If it is present, evaluate its business necessity and determine if the site is reachable from the public internet. If the plugin is not essential, removing it is the most effective way to eliminate the risk. Otherwise, contact the plugin developer for an official update and monitor for available patches.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.