{"data":{"id":"e7e84725-2c87-4056-84f3-aa78e82ce62b","title":"CVE-2025-12973: The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin for WordPress is vulnerable to…","summary":"The S2B AI Assistant plugin for WordPress, in all versions up to and including 1.7.8, lacks file type validation in its storeFile() function, allowing arbitrary file uploads. Authenticated users with Editor-level access or higher can upload arbitrary files to the server, which may make remote code execution possible. The CVE is tracked as CVE-2025-12973 and classified under CWE-434.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-12973","publishedAt":"2025-11-21T22:15:50.267Z","cveId":"CVE-2025-12973","cweIds":["CWE-434"],"cvssScore":"7.2","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["S2B AI Assistant","ChatGPT","OpenAI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"S2B AI Assistant WordPress plugin arbitrary file upload via storeFile()","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00999,"epssCheckedAt":"2026-11-04T18:09:14.608Z","kevDateAdded":null,"advisoryAliases":["GHSA-7m6g-f54m-hfq2"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T06:10:30.726Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-1"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}