{"data":{"id":"bfe5614a-31ce-4e30-9f90-2a6e2fc052b2","title":"CVE-2025-12189: The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for…","summary":"The Bread & Butter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 7.10.1321. Missing or incorrect nonce validation in the uploadImage() function lets unauthenticated attackers upload arbitrary files, which can enable remote code execution if they trick a site administrator into clicking a link.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-12189","publishedAt":"2025-12-05T06:16:06.573Z","cveId":"CVE-2025-12189","cweIds":["CWE-352"],"cvssScore":"4.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00326,"epssCheckedAt":"2026-11-04T18:09:12.971Z","kevDateAdded":null,"advisoryAliases":["GHSA-r8gc-wh4j-rhrc"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T06:10:26.425Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null,"fixes":[]}}