WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
chatbot
Published
2025-02-23
Title
ChatBot < 6.3.6 - Authenticated (Contributor+) Local File Inclusion
Slug
chatbot
Published
2025-06-27
Title
ChatBot < 6.7.5 - Missing Authorization
Slug
chatbot
Published
2025-08-19
Title
WPBOT < 7.1.0 - Admin+ Stored XSS
Slug
chatbot
Published
2025-10-13
Title
ChatBot < 7.7.4 - Missing Authorization
Slug
chatbot
Published
2025-10-12
Title
ChatBot < 7.4.0 - Missing Authorization
Slug
chatbot
Published
2026-03-20
Title
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services < 7.8.0 - Unauthenticated SQL Injection
Slug
chatbot
Published
2026-04-23
Title
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services < 7.9.9 - Missing Authorization
Slug
chatbot
Published
2026-06-30
Title
WPBot AI ChatBot < 8.2.0 - Subscriber+ RAG Settings Update
Slug
chatbot
Published
2026-07-01
Title
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services < 8.3.3 - Reflected Cross-Site Scripting
Slug
chatbot
Published
2026-06-30
Title
WPBot < 8.5.0 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
Slug
chatbot
Published
2026-07-06
Title
WPBot AI ChatBot < 8.5.2 - Admin+ Second-Order SQL Injection via qc_bot_str_fields
Slug
chatbot
Published
2026-07-06
Title
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services < 8.3.8 - Unauthenticated Stored Cross-Site Scripting
Slug
chatbot
Published
2026-07-15
Title
WPBot < 8.5.7 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter
Slug
chatbot
Published
2026-07-15
Title
WPBot < 8.5.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function
Slug
chatbot
Published
2026-07-27
Title
WPBot < 8.6.0 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action
Slug
chatbot
Published
2026-07-27
Title
WPBot < 8.6.0 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action
Slug
chatbot-ai-free-models
Published
2025-10-23
Title
AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant < 1.6.6 - Unauthenticated CSV Injection
Slug
chatbot-chatgpt
Published
2024-05-10
Title
Kognetiks Chatbot for WordPress < 2.0.0 - Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function
Slug
chatbot-chatgpt
Published
2024-05-13
Title
Kognetiks Chatbot for WordPress < 2.0.1 - Unauthenticated Arbitrary File Upload
Slug
chatbot-chatgpt
Published
2024-06-06
Title
Kognetiks Chatbot for WordPress < 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
chatbot-chatgpt
Published
2024-11-12
Title
Kognetiks Chatbot for WordPress < 2.1.8 - Missing Authorization to Authenticated (Subscriber+) Assistant Addition
Slug
chatbot-chatgpt
Published
2024-11-12
Title
Kognetiks Chatbot for WordPress < 2.1.8 - Missing Authorization to Authenticated (Subscriber+) Assistant Update
Slug
chatbot-chatgpt
Published
2024-11-12
Title
Kognetiks Chatbot for WordPress < 2.1.8 - Reflected Cross-Site Scripting
Slug
chatbot-chatgpt
Published
2024-11-12
Title
Kognetiks Chatbot for WordPress < 2.1.9 - Cross-Site Request Forgery to Authenticated (Subscriber+) Assistant Modification
Slug
chatbot-chatgpt
Published
2024-11-12
Title
Kognetiks Chatbot for WordPress < 2.1.8 - Missing Authorization to Authenticated (Subscriber+) Assistant Deletion