Plugin icon

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services

chatbot

Vulnerabilities:

37

Last Updated:

April 3, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2026-03-20
Title
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services < 7.8.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 7.8.0
CVSS
7.5 (high)
Published
2025-10-13
Title
ChatBot < 7.7.4 - Missing Authorization
Fixed in
Fixed in 7.7.4
CVSS
4.3 (medium)
Published
2025-10-12
Title
ChatBot < 7.4.0 - Missing Authorization
Fixed in
Fixed in 7.4.0
CVSS
5.3 (medium)
Published
2025-08-19
Title
WPBOT < 7.1.0 - Admin+ Stored XSS
Fixed in
Fixed in 7.1.0
CVSS
3.5 (low)
Published
2025-06-27
Title
ChatBot < 6.7.5 - Missing Authorization
Fixed in
Fixed in 6.7.5
CVSS
5.4 (medium)
Published
2025-02-23
Title
ChatBot < 6.3.6 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 6.3.6
CVSS
8.8 (high)
Published
2025-01-08
Title
AI ChatBot for WordPress – WPBot < 6.2.4 - Admin+ Stored XSS
Fixed in
Fixed in 6.2.4
CVSS
3.5 (low)
Published
2024-07-16
Title
AI ChatBot for WordPress – WPBot < 5.5.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.5.8
CVSS
5.5 (medium)
Published
2024-05-21
Title
AI ChatBot < 5.3.6 - Missing Authorization via openai_file_delete_callback
Fixed in
Fixed in 5.3.6
CVSS
5 (medium)
Published
2024-05-21
Title
AI ChatBot < 5.3.6 - Missing Authorization via openai_file_upload_callback
Fixed in
Fixed in 5.3.6
CVSS
5 (medium)
Published
2024-05-21
Title
AI ChatBot < 5.3.6 - Missing Authorization via openai_file_list_callback
Fixed in
Fixed in 5.3.6
CVSS
5 (medium)
Published
2024-01-19
Title
ChatBot < 5.1.1 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 5.1.1
CVSS
9.8 (critical)
Published
2023-11-23
Title
ChatBot < 4.7.9 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 4.7.9
CVSS
7.2 (high)
Published
2023-11-01
Title
ChatBot 4.8.6 - 4.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder
Fixed in
Fixed in 4.9.7
CVSS
4.4 (medium)
Published
2023-10-19
Title
AI ChatBot < 4.9.3 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 4.9.3
CVSS
4.3 (medium)
Published
2023-10-19
Title
AI ChatBot < 4.9.3 - Subscriber+ Arbitrary File Deletion
Fixed in
Fixed in 4.9.3
CVSS
9.6 (critical)
Published
2023-10-11
Title
AI ChatBot < 4.9.1 - Subscriber+ Arbitrary File Deletion
Fixed in
Fixed in 4.9.1
CVSS
9.6 (critical)
Published
2023-10-11
Title
AI ChatBot < 4.9.1 - Missing authorization in AJAX calls
Fixed in
Fixed in 4.9.1
CVSS
5.3 (medium)
Published
2023-10-11
Title
ChatBot < 4.9.1 - Unauthenticated Sensitive Data Disclosure
Fixed in
Fixed in 4.9.1
CVSS
5.3 (medium)
Published
2023-10-11
Title
AI ChatBot < 4.9.1 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 4.9.1
CVSS
4.3 (medium)
Published
2023-10-11
Title
AI ChatBot < 4.9.1 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file
Fixed in
Fixed in 4.9.1
CVSS
9.6 (critical)
Published
2023-10-11
Title
ChatBot < 4.9.1 - Unauthenticated Blind SQL Injection
Fixed in
Fixed in 4.9.1
CVSS
9.8 (critical)
Published
2023-10-11
Title
AI ChatBot < 4.9.3 - Missing authorization in AJAX calls
Fixed in
Fixed in 4.9.3
CVSS
5.3 (medium)
Published
2023-10-03
Title
ChatBot < 4.7.9 - CSRF
Fixed in
Fixed in 4.7.9
CVSS
4.3 (medium)
Published
2023-08-08
Title
Chatbot < 4.7.8 - Admin+ Stored XSS in Language Settings
Fixed in
Fixed in 4.7.8
CVSS
3.5 (low)
Published
2023-08-08
Title
Chatbot < 4.7.8 - Admin+ Stored XSS in FAQ Builder
Fixed in
Fixed in 4.7.8
CVSS
3.5 (low)
Published
2023-06-19
Title
AI ChatBot < 4.6.1 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.6.1
CVSS
3.5 (low)
Published
2023-05-25
Title
AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.5.6
CVSS
3.5 (low)
Published
2023-05-22
Title
AI ChatBot < 4.5.5 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 4.5.5
CVSS
3.5 (low)
Published
2023-04-12
Title
ChatBot < 4.5.1 - Admin+ Stored XSS
Fixed in
Fixed in 4.5.1
CVSS
3.5 (low)
Published
2023-04-12
Title
ChatBot < 4.4.9 - Unauthenticated Stored XSS
Fixed in
Fixed in 4.4.9
CVSS
8.8 (high)
Published
2023-04-12
Title
ChatBot < 4.4.5 - Stored XSS via CSRF
Fixed in
Fixed in 4.4.5
CVSS
7.5 (high)
Published
2023-04-12
Title
ChatBot < 4.4.9 - Subscriber+ OpenAI Settings Update to Stored XSS
Fixed in
Fixed in 4.4.9
CVSS
8.0 (high)
Published
2023-04-12
Title
ChatBot < 4.4.7 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 4.4.7
CVSS
8.1 (high)
Published
2023-02-23
Title
ChatBot < 4.3.0 - Settings Reset via CSRF
Fixed in
Fixed in 4.3.0
CVSS
4.3 (medium)
Published
2023-01-27
Title
AI ChatBot < 4.3.1 - Admin+ Stored XSS
Fixed in
Fixed in 4.3.1
CVSS
3.5 (low)
Published
2023-01-09
Title
ChatBot < 4.2.9 - Unauthenticated Settings Reset
Fixed in
Fixed in 4.2.9
CVSS
5.3 (medium)