WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services

Güvenlik açıkları

• CVE-2024-22309kimlik doğrulamasız≤ 5.1.0

  WordPress ChatBot Plugin <= 5.1.0 is vulnerable to PHP Object Injection

  Kritik 9.8

• CVE-2023-5533kimlik doğrulamasız≤ 4.8.9

  AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions

  Kritik 9.8

• CVE-2026-32499kimlik doğrulamasız≤ <= 7.7.9

  WordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2023-44993kimlik doğrulamasız · tıklama gerekir≤ 4.7.8

  WordPress ChatBot Plugin <= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2023-24415kimlik doğrulamasız · tıklama gerekir≤ 4.2.8

  WordPress AI ChatBot plugin <= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2023-5241abone+≤ 4.8.9

  AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file

  Yüksek 8.1

• CVE-2023-5212abone+≤ 4.8.9

  AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file

  Yüksek 8.1

• CVE-2024-0453abone+≤ 5.3.4

  AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback

  Yüksek 7.7

• CVE-2024-0452abone+≤ 5.3.4

  AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback

  Yüksek 7.7

• CVE-2023-5204kimlik doğrulamasız≤ 4.8.9

  AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response

  Yüksek 7.5

• CVE-2025-26932giriş gerekir≤ 6.3.5

  WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerability

  Yüksek 7.5

• CVE-2026-83593kimlik doğrulamasız≤ 8.7.3

  WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter

  Yüksek 7.2

• CVE-2026-13731kimlik doğrulamasız≤ 8.4.9

  WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter

  Yüksek 7.2

• CVE-2023-48741yüksek yetki≤ 4.7.8

  WordPress ChatBot Plugin <= 4.7.8 is vulnerable to SQL Injection

  Yüksek 7.2

• CVE-2026-57363kimlik doğrulamasız · tıklama gerekir≤ 8.3.7

  WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-57362kimlik doğrulamasız · tıklama gerekir≤ 8.3.2

  WordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-40788abone+≤ 7.9.7

  WordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerability

  Yüksek 7.1

• CVE-2023-5534kimlik doğrulamasız · tıklama gerekir≤ 4.8.9

  AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions

  Orta 5.4

• CVE-2026-16774kimlik doğrulamasız≤ 8.5.9

  WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action

  Orta 5.3

• CVE-2026-16773kimlik doğrulamasız≤ 8.5.9

  WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action

  Orta 5.3

• CVE-2026-15106kimlik doğrulamasız≤ 8.5.6

  WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter

  Orta 5.3

• CVE-2025-64277kimlik doğrulamasız≤ 7.3.9

  WordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2023-5254kimlik doğrulamasız≤ 4.8.9

  AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user

  Orta 5.3

• CVE-2024-0451abone+≤ 5.3.4

  AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback

  Orta 5.0

• CVE-2024-6669yönetici≤ 5.5.7

  AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Orta 4.8

• CVE-2023-5606yönetici≤ 4.9.6

  The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficie

  Orta 4.8

• CVE-2022-47613yönetici≤ 4.3.0

  WordPress AI ChatBot Plugin <= 4.3.0 is vulnerable to Cross Site Scripting (XSS)

  Orta 4.8

• CVE-2026-15610abone+≤ 8.5.6

  WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function

  Orta 4.3

• CVE-2025-62952giriş gerekir≤ 7.7.3

  WordPress ChatBot plugin <= 7.7.3 - Broken Access Control vulnerability

  Orta 4.3

• CVE-2025-53200giriş gerekir≤ 6.7.3

  WordPress ChatBot plugin <= 6.7.3 - Broken Access Control Vulnerability

  Orta 4.3