CVE-2025-12585 — Vulnerability intelligence

—

Published: 2025-12-03T04:15:59.650

CVSS

5.3

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.5 via upload filenames. This makes it possible for unauthenticated attackers to extract session values that can subsequently be used to access conversation data.

Sources

• CVE-2025-12585
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory