WP
Product
Wpbot
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 16Low 1
Watch
Add Wpbot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-1660 | 6.1 | May 8 | The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing unauthenticated users to update some settings, leading to… Affected: before 4.4.9 |
| CVE-2023-1011 | 6.1 | May 8 | The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper CSRF check, allowing… Affected: before 4.4.5 |
| CVE-2023-5534 | 5.4 | Oct 20 | The AI ChatBot plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.8.9 and 4.9.2 Affected: through 4.8.9; 4.9.2 |
| CVE-2023-1651 | 5.4 | May 8 | The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any authenticated users,… Affected: before 4.4.9 |
| CVE-2023-5254 | 5.3 | Oct 19 | The ChatBot plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.8.9 via the qcld_wb_chatbot_check_user function Affected: before 4.9.1 |
| CVE-2024-0451 | 5.0 | May 22 | AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback Affected: before 5.3.6 |
| CVE-2025-0329 | 4.8 | May 15 | AI ChatBot for WordPress – WPBot < 6.2.4 - Admin+ Stored XSS Affected: before 6.2.4 |
| CVE-2024-6669 | 4.8 | Jul 17 | AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting Affected: before 5.5.8 |
| CVE-2023-5606 | 4.8 | Nov 2 | The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficient input sanitization and output… Affected: 4.8.6 before 4.9.7 |
| CVE-2023-4254 | 4.8 | Sep 4 | The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site… Affected: before 4.7.8 |
| CVE-2023-4253 | 4.8 | Sep 4 | The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site… Affected: before 4.7.8 |
| CVE-2023-3175 | 4.8 | Jul 10 | The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even… Affected: before 4.6.1 |
| CVE-2023-2811 | 4.8 | Jun 19 | The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 4.5.6 |
| CVE-2023-2742 | 4.8 | Jun 19 | The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even… Affected: before 4.5.5 |
| CVE-2023-1649 | 4.8 | May 8 | The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 4.5.1 |
| CVE-2022-47613 | 4.8 | Mar 29 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions Affected: through 4.3.0 |
Showing 16