WordPress Plugin Vulnerabilities

ChatBot < 4.9.1 - Unauthenticated Sensitive Data Disclosure

Description

The plugin is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.8.9 via the qcld_wb_chatbot_check_user function.

Affects Plugins

Plugin icon
chatbot
Fixed in 4.9.1

References

CVE
CVE-2023-5254

Classification

Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
A3: Sensitive Data Exposure
CWE
CWE-200
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Marco Wotschka
Verified
No
WPVDB ID
20dcd49e-cc79-4ceb-a7cf-52c57ebfbb15

Timeline

Publicly Published
2023-10-11 (about 2 years ago)
Added
2023-10-20 (about 2 years ago)
Last Updated
2023-10-20 (about 2 years ago)

Other

Published
Title
Published
2025-09-22
Title
3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery < 1.16.17 - Unauthenticated Sensitive Information Exposure
Published
2023-12-28
Title
Send Users Email < 1.4.4 - Sensitive Information Exposure via Error Logs
Published
2023-11-28
Title
Media File Renamer < 5.7.0 - Sensitive Information Exposure via Log File
Published
2024-09-24
Title
Themesflat Addons For Elementor < 2.2.2 - Contributor+ Information Exposure
Published
2024-06-12
Title
Easy WP SMTP by SendLayer < 2.3.1 - Exposure of Sensitive Information via the UI