WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
chatbot
Published
2024-05-21
Title
AI ChatBot < 5.3.6 - Missing Authorization via openai_file_upload_callback
Slug
chatbot
Published
2024-05-21
Title
AI ChatBot < 5.3.6 - Missing Authorization via openai_file_delete_callback
Slug
chatbot
Published
2024-07-16
Title
AI ChatBot for WordPress – WPBot < 5.5.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
chatbot
Published
2025-01-08
Title
AI ChatBot for WordPress – WPBot < 6.2.4 - Admin+ Stored XSS
Slug
chatbot
Published
2025-02-23
Title
ChatBot < 6.3.6 - Authenticated (Contributor+) Local File Inclusion
Slug
chatbot
Published
2025-06-27
Title
ChatBot < 6.7.5 - Missing Authorization
Slug
chatbot
Published
2025-08-19
Title
WPBOT < 7.1.0 - Admin+ Stored XSS
Slug
chatbot
Published
2025-10-13
Title
ChatBot < 7.7.4 - Missing Authorization
Slug
chatbot
Published
2025-10-12
Title
ChatBot < 7.4.0 - Missing Authorization
Slug
chatbot
Published
2026-03-20
Title
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services < 7.8.0 - Unauthenticated SQL Injection
Slug
chatbot
Published
2026-04-23
Title
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services < 7.9.9 - Missing Authorization
Slug
chatbot
Published
2026-06-30
Title
WPBot AI ChatBot < 8.2.0 - Subscriber+ RAG Settings Update
Slug
chatbot
Published
2026-07-01
Title
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services < 8.3.3 - Reflected Cross-Site Scripting
Slug
chatbot
Published
2026-06-30
Title
WPBot < 8.5.0 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
Slug
chatbot
Published
2026-07-06
Title
WPBot AI ChatBot < 8.5.2 - Admin+ Second-Order SQL Injection via qc_bot_str_fields
Slug
chatbot
Published
2026-07-06
Title
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services < 8.3.8 - Unauthenticated Stored Cross-Site Scripting
Slug
chatbot
Published
2026-07-15
Title
WPBot < 8.5.7 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter
Slug
chatbot
Published
2026-07-15
Title
WPBot < 8.5.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function
Slug
chatbot
Published
2026-07-27
Title
WPBot < 8.6.0 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action
Slug
chatbot
Published
2026-07-27
Title
WPBot < 8.6.0 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action
Slug
chatbot
Published
2026-09-08
Title
WPBot < 8.7.4 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
Slug
chatbot
Published
2026-09-10
Title
WPBot < 8.5.7 - Unauthenticated AI Provider API Abuse via Multiple AJAX Actions
Slug
chatbot
Published
2026-09-10
Title
WPBot 8.4.9 - 8.5.9 - Unauthenticated Chat Visitor PII Disclosure
Slug
chatbot
Published
2026-09-14
Title
WPBot 8.7.2 - 8.7.5 - Subscriber+ Claude AI Settings Update
Slug
chatbot-ai-free-models
Published
2025-10-23
Title
AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant < 1.6.6 - Unauthenticated CSV Injection