CVE-2025-13381 Overview
CVE-2025-13381 is a missing authorization vulnerability [CWE-862] in the AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress. The flaw affects all versions up to and including 2.7.0. The ays_chatgpt_save_wp_media function lacks a capability check, allowing unauthenticated attackers to upload media files to the WordPress site. The vendor addressed the issue in version 2.7.1.
Critical Impact
Unauthenticated attackers can upload arbitrary media files to affected WordPress installations, consuming server resources and potentially staging further attacks against site users.
Affected Products
- AI ChatBot with ChatGPT and Content Generator by AYS (WordPress plugin)
- All versions up to and including 2.7.0
- Fixed in version 2.7.1
Discovery Timeline
- 2025-11-27 - CVE-2025-13381 published to NVD
- 2026-06-17 - Last updated in NVD database
Technical Details for CVE-2025-13381
Vulnerability Analysis
The vulnerability resides in the ays_chatgpt_save_wp_media function within the plugin's admin controller. The function is exposed through WordPress AJAX handlers but does not verify the caller's capabilities or authentication state. Any HTTP client can invoke the endpoint and trigger media upload logic without holding a valid WordPress session.
The plugin registers the AJAX action in includes/class-chatgpt-assistant.php and implements the handler in admin/class-chatgpt-assistant-admin.php. Because the handler is hooked to both wp_ajax_ and wp_ajax_nopriv_ variants without a current_user_can() check or nonce verification, the upload path is reachable by unauthenticated requests.
The EPSS score is 0.254% at the 16.9 percentile, indicating low observed exploitation likelihood at this time. However, missing authorization on file upload endpoints is a well-documented attack surface in the WordPress plugin ecosystem.
Root Cause
The root cause is a missing capability check [CWE-862] in the AJAX handler. The function processes media file input and writes it to the WordPress uploads directory without confirming that the requester is an authenticated administrator. WordPress security guidance requires plugin authors to gate privileged actions with current_user_can() and check_ajax_referer().
Attack Vector
An attacker sends a crafted HTTP POST request to the WordPress admin-ajax.php endpoint targeting the vulnerable action. No credentials or user interaction are required. The uploaded file is written into the WordPress media library, which can be used to fill disk space, host attacker-controlled content, or stage phishing lures on trusted domains.
The vulnerability mechanism is described in detail in the Wordfence Vulnerability Report and the WordPress Plugin Change Log.
Detection Methods for CVE-2025-13381
Indicators of Compromise
- POST requests to /wp-admin/admin-ajax.php with the action parameter set to ays_chatgpt_save_wp_media originating from unauthenticated sessions.
- Unexpected files appearing in the wp-content/uploads/ directory that do not correspond to legitimate editorial activity.
- Media library entries with no associated author or created outside of business hours.
Detection Strategies
- Inspect web server access logs for requests referencing the ays_chatgpt_save_wp_media action, particularly from clients without a valid wordpress_logged_in cookie.
- Monitor filesystem creation events under the WordPress uploads path for unusual file types or MIME mismatches.
- Correlate plugin version data from asset inventories against the vulnerable range (<= 2.7.0).
Monitoring Recommendations
- Enable WordPress audit logging to capture media upload events with user attribution.
- Alert on repeated 200 responses to admin-ajax.php from a single source IP within a short window.
- Track disk utilization on the WordPress host to detect bulk upload activity.
How to Mitigate CVE-2025-13381
Immediate Actions Required
- Update the AI ChatBot with ChatGPT and Content Generator by AYS plugin to version 2.7.1 or later on all WordPress installations.
- Audit the wp-content/uploads/ directory for files created during the vulnerable window and remove any that are not associated with legitimate content.
- Review WordPress media library entries for suspicious authorless uploads.
Patch Information
The vendor released version 2.7.1 which adds a capability check to the ays_chatgpt_save_wp_media handler. The code change is documented in the WordPress Plugin Change Log. Administrators should apply updates through the WordPress plugin management interface or via WP-CLI.
Workarounds
- Deactivate the plugin until the update to 2.7.1 can be applied.
- Block requests to admin-ajax.php with the action=ays_chatgpt_save_wp_media parameter at the web application firewall (WAF) layer.
- Restrict access to /wp-admin/admin-ajax.php for unauthenticated clients using server-level access controls where feasible.
# Update the plugin using WP-CLI
wp plugin update ays-chatgpt-assistant --version=2.7.1
# Verify installed version
wp plugin get ays-chatgpt-assistant --field=version
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
