BERTHA AI. Your AI co-pilot for WordPress and Chrome

BERTHA AI. Your AI co-pilot for WordPress and Chrome has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (75%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, one record each.

01234567891027.12.2023Today27.12.20239.8BERTHA AI Plugin <= 1.11.10.7 - Unauthenticated Arbitrary File Upload CVSS 9.8 · 27.12.202317.04.20254.3BERTHA AI <= 1.12.10.2 - Authenticated (Subscriber+) Arbitrary Content Deletion CVSS 4.3 · 17.04.202516.05.20254.3BERTHA AI <= 1.12.11 - Missing Authorization CVSS 4.3 · 16.05.202529.11.20255.3BERTHA AI <= 1.13 - Missing Authorization CVSS 5.3 · 29.11.2025

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage50%
Open

2

Fixed

2

Get automatic notifications for all BERTHA AI. Your AI co-pilot for WordPress and Chrome vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2025-62085

BERTHA AI <= 1.13 - Missing Authorization

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C