WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
chatbot
Published
2024-05-21
Title
AI ChatBot < 5.3.6 - Missing Authorization via openai_file_upload_callback
Slug
chatbot
Published
2024-05-21
Title
AI ChatBot < 5.3.6 - Missing Authorization via openai_file_delete_callback
Slug
chatbot
Published
2024-07-16
Title
AI ChatBot for WordPress – WPBot < 5.5.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
chatbot
Published
2025-01-08
Title
AI ChatBot for WordPress – WPBot < 6.2.4 - Admin+ Stored XSS
Slug
chatbot
Published
2025-02-23
Title
ChatBot < 6.3.6 - Authenticated (Contributor+) Local File Inclusion
Slug
chatbot
Published
2025-06-27
Title
ChatBot < 6.7.5 - Missing Authorization
Slug
chatbot
Published
2025-08-19
Title
WPBOT < 7.1.0 - Admin+ Stored XSS
Slug
chatbot
Published
2025-10-13
Title
ChatBot < 7.7.4 - Missing Authorization
Slug
chatbot
Published
2025-10-12
Title
ChatBot < 7.4.0 - Missing Authorization
Slug
chatbot-ai-free-models
Published
2025-10-23
Title
AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant < 1.6.6 - Unauthenticated CSV Injection
Slug
chatbot-chatgpt
Published
2024-05-10
Title
Kognetiks Chatbot for WordPress < 2.0.0 - Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function
Slug
chatbot-chatgpt
Published
2024-05-13
Title
Kognetiks Chatbot for WordPress < 2.0.1 - Unauthenticated Arbitrary File Upload
Slug
chatbot-chatgpt
Published
2024-06-06
Title
Kognetiks Chatbot for WordPress < 1.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
chatbot-chatgpt
Published
2024-11-12
Title
Kognetiks Chatbot for WordPress < 2.1.8 - Missing Authorization to Authenticated (Subscriber+) Assistant Addition
Slug
chatbot-chatgpt
Published
2024-11-12
Title
Kognetiks Chatbot for WordPress < 2.1.8 - Missing Authorization to Authenticated (Subscriber+) Assistant Update
Slug
chatbot-chatgpt
Published
2024-11-12
Title
Kognetiks Chatbot for WordPress < 2.1.8 - Reflected Cross-Site Scripting
Slug
chatbot-chatgpt
Published
2024-11-12
Title
Kognetiks Chatbot for WordPress < 2.1.9 - Cross-Site Request Forgery to Authenticated (Subscriber+) Assistant Modification
Slug
chatbot-chatgpt
Published
2024-11-12
Title
Kognetiks Chatbot for WordPress < 2.1.8 - Missing Authorization to Authenticated (Subscriber+) Assistant Deletion
Slug
chatbot-chatgpt
Published
2025-10-17
Title
Kognetiks Chatbot < 2.3.6 - Unauthenticated Limited File Uploads and Conversation Erasing
Slug
chatbot-support-ai
Published
2024-08-13
Title
Chatbot Support AI <= 1.0.2 - Admin+ Stored XSS
Slug
chative-live-chat-and-chatbot
Published
2025-01-06
Title
Chative Live chat and Chatbot < 1.2 - Channel/Org ID Update via CSRF
Slug
chatlive
Published
2025-02-21
Title
CHATLIVE <= 2.0.1 - Unauthenticated SQL Injection
Slug
chatplusjp
Published
2024-10-21
Title
chatplusjp <= 1.02 - Reflected Cross-Site Scripting
Slug
chatpressai
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
chatra-live-chat
Published
2025-07-04
Title
Chatra Live Chat + ChatBot + Cart Saver <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting