Lucene search
+L

CVE-2025-12973 S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.8 - Authenticated (Editor+) Arbitrary File Upload

🗓️ 21 Nov 2025 16:28:13Reported by WordfenceType 
cvelist
 cvelist
🔗 www.cve.org👁 28 Views

Authenticated editors can upload arbitrary files to the S2B AI Assistant plugin up to version 1.7.8 due to missing file type validation.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for CVE-2025-12973
10 Nov 202518:40
githubexploit
circl
Circl
CVE-2025-12973
21 Nov 202518:25
circl
cnnvd
CNNVD
WordPress plugin S2B AI Assistant 代码问题漏洞
21 Nov 202500:00
cnnvd
cve
CVE
CVE-2025-12973
21 Nov 202516:28
cve
euvd
EUVD
EUVD-2025-198496
21 Nov 202516:28
euvd
kitploit
Kitploit
CVE-2025-12973
10 Sep 202610:45
kitploit
nvd
NVD
CVE-2025-12973
21 Nov 202517:15
nvd
patchstack
Patchstack
WordPress S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator plugin <= 1.7.8 - Authenticated (Editor+) Arbitrary File Upload vulnerability
24 Nov 202508:10
patchstack
ptsecurity
Positive Technologies
PT-2025-47787
21 Nov 202500:00
ptsecurity
redhatcve
RedhatCVE
CVE-2025-12973
22 Nov 202517:36
redhatcve
Rows per page
[
  {
    "vendor": "oc3dots",
    "product": "S2B AI Assistant – ChatBot, AI Agents, ChatGPT API, Image Generator",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.7.8",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation