CyberSecBulletin

Soportecibeles vulnerabilities

We track 2 vulnerabilities in Soportecibeles products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 25, 2025.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Soportecibeles vulnerabilities

  • 9.8 Critical severity

    AI Feeds: Unrestricted Upload of File with Dangerous Type

    CVE-2025-13597SoportecibelesEPSS 1.05%

    The AI Feeds plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.0.11. This makes it possible for unauthenticated attackers to download arbitrar

  • 9.8 Critical severity

    CIBELES AI: Unrestricted Upload of File with Dangerous Type

    CVE-2025-13595SoportecibelesEPSS 1.05%

    The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.10.8. This makes it possible for unauthenticated attackers to download arbitr