WA
Product
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 8Low 0
Watch
Add WPBot – AI ChatBot for Live Support, Lead Generation, AI Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5212 | 8.1 | Oct 19 | AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file Affected: through 4.8.9; 4.9.2 |
| CVE-2023-5241 | 8.1 | Oct 19 | AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file Affected: through 4.8.9; 4.9.2 |
| CVE-2024-0453 | 7.7 | May 22 | AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback Affected: through 5.3.4 |
| CVE-2024-0452 | 7.7 | May 22 | AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback Affected: through 5.3.4 |
| CVE-2023-5204 | 7.5 | Oct 19 | AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response Affected: through 4.8.9 |
| CVE-2026-83593 | 7.2 | Sep 9 | WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter Affected: through 8.7.3 |
| CVE-2026-13731 | 7.2 | Jul 1 | WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter Affected: through 8.4.9 |
Showing 7