Skip to content
Noroxi

GeekyBot

geeky-bot · plugin

Known security vulnerabilities for GeekyBot. Find out in seconds which version runs on your site with WP Lens.

7 known vulnerabilities

4 critical · 1 with public exploit code · latest Aug 13, 2026

Vulnerabilities

  • CVE-2026-40772

    WordPress GeekyBot plugin <= 1.2.2 - Arbitrary File Upload vulnerability

    Critical 10.0

  • CVE-2026-5294

    GeekyBot <= 1.2.2 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation via 'geekybot_frontendajax' AJAX Action

    Critical 9.8

  • CVE-2026-57679

    WordPress GeekyBot plugin <= 1.2.5 - SQL Injection vulnerability

    Critical 9.3

  • CVE-2026-39519

    WordPress GeekyBot plugin <= 1.2.0 - SQL Injection vulnerability

    Critical 9.3

  • CVE-2026-3456

    GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation <= 1.2.0 - Unauthenticated SQL Injection via 'attributekey'

    High 7.5

  • CVE-2025-15266

    GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting

    High 7.2

  • CVE-2026-61965

    WordPress GeekyBot plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

    High 7.1

← Back to directory