WPBot AI ChatBot < 8.2.0 – Subscriber+ RAG Settings Update | CVE 2026-14185

Description

The plugin does not perform a capability or nonce check in one of its retrieval-augmented-generation settings handlers, allowing authenticated users with subscriber-level access to modify the plugin's configuration.

Proof of Concept

Prerequisites:
- WPBot AI ChatBot <= 8.1.0 active, with a RAG backend enabled and its API key set (OpenAI or Gemini) - the plugin's normal RAG operating state.
- A subscriber account.

Steps (as the attacker, a Subscriber):
1. Log in as the subscriber.
2. Submit the RAG settings update with no nonce:
curl -s -b "<subscriber session>" \
  -d "action=qcld_rag_settings_option&rag_embed_pages=1&rag_embed_posts=1&rag_embed_str=ATTACKER_CONTROLLED&rag_auto_sync_enabled=1" \
  "https://victim.example/wp-admin/admin-ajax.php"
-> HTTP 200 {"status":"success"}

Result: the plugin's RAG options are overwritten with the attacker-supplied values and persist in the database. The handler performs no nonce and no capability check (its neighbouring settings handler correctly requires a nonce and the manage_options capability).