CVE-2025-48138: Bertha AI Auth Bypass Vulnerability

CVE-2025-48138 Overview

CVE-2025-48138 is a missing authorization vulnerability in the Bertha AI WordPress plugin (bertha-ai-free) developed by Andrew Palmer. The flaw stems from incorrectly configured access control security levels, allowing authenticated low-privilege users to perform actions reserved for higher-privileged roles. The vulnerability affects all versions of Bertha AI up to and including 1.13. Exploitation occurs over the network with low attack complexity and requires only low privileges, with no user interaction needed. Successful exploitation impacts confidentiality, integrity, and availability of the WordPress site. The issue is tracked under CWE-862: Missing Authorization.

Critical Impact
Authenticated attackers with minimal privileges can abuse missing authorization checks to access or modify plugin functionality, leading to full compromise of confidentiality, integrity, and availability on affected WordPress installations.

Affected Products

Bertha AI (bertha-ai-free) WordPress plugin — versions up to and including 1.13
WordPress sites running the vulnerable plugin
Andrew Palmer / Bertha AI plugin distributions hosted on WordPress.org

Discovery Timeline

2025-05-16 - CVE-2025-48138 published to NVD
2026-06-17 - Last updated in NVD database

Technical Details for CVE-2025-48138

Vulnerability Analysis

The Bertha AI plugin exposes functionality through WordPress action handlers without enforcing proper capability checks. Missing authorization means the plugin trusts the authenticated session without verifying whether the user role is permitted to invoke a given action. Attackers holding low-privilege accounts such as Subscriber or Contributor can therefore reach administrative or privileged plugin features. The vulnerability is exploitable remotely over HTTP against any WordPress site running the affected version. Because the impact extends to confidentiality, integrity, and availability, successful exploitation can lead to data exposure, content tampering, or service disruption. EPSS data indicates a current exploitation probability of approximately 0.28%.

Root Cause

The root cause is CWE-862: Missing Authorization. Plugin endpoints fail to call WordPress capability functions such as current_user_can() or to verify nonces tied to privileged roles before executing sensitive operations. Access control security levels are incorrectly configured, so any authenticated session passes the implicit authorization gate. This pattern is common in WordPress plugins that gate functionality only by authentication status rather than by capability.

Attack Vector

An attacker first obtains a low-privilege authenticated account, which is trivial on sites that allow open registration. The attacker then issues HTTP requests to vulnerable plugin endpoints, typically via admin-ajax.php or REST routes registered by the plugin. Because the handlers omit capability verification, the requests succeed and execute privileged plugin operations. No social engineering or user interaction is required. Refer to the Patchstack Vulnerability Report for technical details on the specific endpoints.

Detection Methods for CVE-2025-48138

Indicators of Compromise

Unexpected POST requests from low-privilege user sessions to wp-admin/admin-ajax.php invoking Bertha AI actions.
New or modified WordPress posts, pages, or plugin settings attributed to Subscriber or Contributor accounts.
Outbound calls to Bertha AI's third-party API from unexpected users or at unusual times.
Unfamiliar entries in WordPress option tables or plugin-specific database tables created by non-administrative users.

Detection Strategies

Audit WordPress access logs for requests targeting Bertha AI AJAX actions or REST routes from non-administrative roles.
Enable WordPress activity logging plugins to capture privileged actions performed by low-privilege users.
Compare installed plugin version against 1.13 and flag any host still running an affected build.
Review user registration logs for newly created Subscriber accounts that immediately interact with plugin endpoints.

Monitoring Recommendations

Monitor admin-ajax.php and REST API endpoints for anomalous role-to-action mappings.
Alert on plugin configuration changes performed outside of administrator sessions.
Track HTTP 200 responses to plugin endpoints originating from Subscriber-level cookies.
Forward WordPress and web server logs to a centralized log platform for correlation and retention.

How to Mitigate CVE-2025-48138

Immediate Actions Required

Update the Bertha AI plugin to a version newer than 1.13 once the vendor publishes a fixed release.
Disable or remove the bertha-ai-free plugin on sites where an immediate update is not possible.
Disable open user registration or restrict default new-user roles on affected WordPress sites.
Review and revoke suspicious low-privilege accounts created during the exposure window.

Patch Information

At the time of NVD publication, the vendor advisory available through the Patchstack Vulnerability Report tracks remediation status for Bertha AI versions up to 1.13. Administrators should consult the Patchstack record and the plugin's WordPress.org listing for the latest fixed version and apply it through the standard WordPress plugin updater.

Workarounds

Use a Web Application Firewall (WAF) to block requests to vulnerable Bertha AI endpoints from non-administrative users.
Restrict access to wp-admin/admin-ajax.php via IP allow-listing where feasible.
Set the default new user role to a custom role with minimal capabilities until the plugin is patched.
Apply a virtual patch through Patchstack or an equivalent WordPress security service.

bash

# Configuration example: temporarily deactivate the vulnerable plugin via WP-CLI
wp plugin deactivate bertha-ai-free
wp plugin status bertha-ai-free

# Restrict new user registration role to minimize abuse surface
wp option update default_role 'subscriber'
wp option update users_can_register 0