Plugin icon

GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content

geeky-bot

Vulnerabilities:

5

Last Updated:

May 22, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2026-05-04
Title
GeekyBot < 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation via 'geekybot_frontendajax' AJAX Action
Fixed in
Fixed in 1.2.3
CVSS
9.8 (critical)
Published
2026-05-04
Title
GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation < 1.2.1 - Unauthenticated SQL Injection via 'attributekey'
Fixed in
Fixed in 1.2.1
CVSS
7.5 (high)
Published
2026-04-21
Title
GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content < 1.2.3 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 1.2.3
CVSS
8.8 (high)
Published
2026-04-08
Title
GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content < 1.2.1 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.2.1
CVSS
7.5 (high)
Published
2026-01-13
Title
GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation < 1.1.9 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.1.9
CVSS
7.2 (high)