CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Bertha.Ai BERTHA AI. Your AI co-pilot for WordPress and Chrome.This issue affects BERTHA AI. Your AI co-pilot for WordPress and Chrome: from n/a through 1.11.10.7.
Explanation of Vulnerability in Simple Terms
The Bertha AI WordPress plugin through version 1.11.10.7 allows unauthenticated attackers to upload arbitrary files to the site without restriction. An attacker can upload malicious files over the network with no special setup required. This can lead to complete compromise of the WordPress installation, including data theft, site defacement, and malware injection.
What an attacker can do
Upload arbitrary files to the site and execute malicious code without authentication.
Potential impact on your site
Complete compromise of the WordPress site, including data theft, malware injection, and loss of control.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
