WP
Product
Wpbot
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 16Low 1
Watch
Add Wpbot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-22309 | 9.8 | Jan 24 | Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0 Affected: before 5.1.1 |
| CVE-2023-5533 | 9.8 | Oct 20 | The AI ChatBot plugin for WordPress is vulnerable to unauthorized use of AJAX actions due to missing capability checks on the corresponding functions in versions up to, and… Affected: through 4.8.9; 4.9.2 |
| CVE-2023-1650 | 9.8 | May 8 | The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauthenticated users, which could allow them to perform PHP… Affected: before 4.4.7 |
| CVE-2023-44993 | 8.8 | Oct 9 | Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.7.8 versions Affected: through 4.7.8 |
| CVE-2023-5241 | 8.1 | Oct 19 | The AI ChatBot for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.8.9 as well as 4.9.2 via the qcld_openai_upload_pagetraining_file function Affected: before 4.9.1; 4.9.2 |
| CVE-2023-5212 | 8.1 | Oct 19 | The AI ChatBot plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 4.8.9 as well as version 4.9.2 Affected: before 4.9.1; 4.9.2 |
| CVE-2024-0453 | 7.7 | May 22 | The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_delete_callback function in all… Affected: before 5.3.6 |
| CVE-2024-0452 | 7.7 | May 22 | The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_upload_callback function in all… Affected: before 5.3.6 |
| CVE-2023-5204 | 7.5 | Oct 19 | The ChatBot plugin for WordPress is vulnerable to SQL Injection via the $strid parameter in versions up to, and including, 4.8.9 due to insufficient escaping on the user supplied… Affected: before 4.9.1 |
| CVE-2023-48741 | 7.2 | Dec 19 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud AI ChatBot.This issue affects AI ChatBot: from n/a through 4.7.8 Affected: through 4.7.8 |
| CVE-2023-1660 | 6.1 | May 8 | The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing unauthenticated users to update some settings, leading to… Affected: before 4.4.9 |
| CVE-2023-1011 | 6.1 | May 8 | The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper CSRF check, allowing… Affected: before 4.4.5 |
| CVE-2023-5534 | 5.4 | Oct 20 | The AI ChatBot plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.8.9 and 4.9.2 Affected: through 4.8.9; 4.9.2 |
| CVE-2023-1651 | 5.4 | May 8 | The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any authenticated users,… Affected: before 4.4.9 |
| CVE-2023-5254 | 5.3 | Oct 19 | The ChatBot plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.8.9 via the qcld_wb_chatbot_check_user function Affected: before 4.9.1 |
| CVE-2024-0451 | 5.0 | May 22 | The AI ChatBot plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the openai_file_list_callback function in all versions up to,… Affected: before 5.3.6 |
| CVE-2025-0329 | 4.8 | May 15 | The AI ChatBot for WordPress WordPress plugin before 6.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… Affected: before 6.2.4 |
| CVE-2024-6669 | 4.8 | Jul 17 | The AI ChatBot for WordPress – WPBot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.7 due to… Affected: before 5.5.8 |
| CVE-2023-5606 | 4.8 | Nov 2 | The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficient input sanitization and output… Affected: 4.8.6 before 4.9.7 |
| CVE-2023-4254 | 4.8 | Sep 4 | The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site… Affected: before 4.7.8 |
| CVE-2023-4253 | 4.8 | Sep 4 | The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site… Affected: before 4.7.8 |
| CVE-2023-3175 | 4.8 | Jul 10 | The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even… Affected: before 4.6.1 |
| CVE-2023-2811 | 4.8 | Jun 19 | The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 4.5.6 |
| CVE-2023-2742 | 4.8 | Jun 19 | The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even… Affected: before 4.5.5 |
| CVE-2023-1649 | 4.8 | May 8 | The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 4.5.1 |
| CVE-2022-47613 | 4.8 | Mar 29 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions Affected: through 4.3.0 |
| CVE-2025-9111 | 3.5 | Sep 9 | The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… Affected: before 7.1.0 |
Showing 27