Login Request a demo
WP
Product
Wpbot
by Quantumcloud · last CVE Sep 9, 2025
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities27In the news0Timeline
Severity mix
Critical 3High 7Medium 16Low 1
Severity
All severities27Critical3High7Medium16Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wpbot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-44993
8.8
0%
Oct 9
Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.7.8 versions
Affected: through 4.7.8
CVE-2023-5241
8.1
3%
Oct 19
The AI ChatBot for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.8.9 as well as 4.9.2 via the qcld_openai_upload_pagetraining_file function
Affected: before 4.9.1; 4.9.2
CVE-2023-5212
8.1
2%
Oct 19
The AI ChatBot plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 4.8.9 as well as version 4.9.2
Affected: before 4.9.1; 4.9.2
CVE-2024-0453
7.7
0%
May 22
The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_delete_callback function in all…
Affected: before 5.3.6
CVE-2024-0452
7.7
0%
May 22
The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_upload_callback function in all…
Affected: before 5.3.6
CVE-2023-5204
7.5
8%
Oct 19
The ChatBot plugin for WordPress is vulnerable to SQL Injection via the $strid parameter in versions up to, and including, 4.8.9 due to insufficient escaping on the user supplied…
Affected: before 4.9.1
CVE-2023-48741
7.2
1%
Dec 19
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud AI ChatBot.This issue affects AI ChatBot: from n/a through 4.7.8
Affected: through 4.7.8
Showing 7