Lucene search
K

109 matches found

Cvelist
Cvelist
added 2026/05/20 5:31 a.m.35 views

CVE-2026-2955 AI Chatbot & Workflow Automation by AIWU <= 1.4.14 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' header in versions up to, and including, 1.4.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

6.4CVSS0.00061EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/25 4:15 p.m.1 views

CVE-2026-32499 WordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL Injection.This issue affects ChatBot: from n/a through = 7.7.9...

9.3CVSS5.9AI score0.00045EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/25 4:15 p.m.22 views

CVE-2026-32499 WordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL Injection.This issue affects ChatBot: from n/a through = 7.7.9...

9.3CVSS0.00045EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/20 5:36 p.m.2 views

WordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin ChatBot versions = 7.7.9...

9.3CVSS5.9AI score0.00045EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2026/03/03 12:0 a.m.2 views

WordPress plugin AI ChatBot with ChatGPT and Content Generator by AYS 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.00089EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/02/03 3:18 p.m.3 views

WordPress AI ChatBot plugin <= 5.3.4 - Missing Authorization via openai_file_delete_callback vulnerability

Missing Authorization via openaifiledeletecallback vulnerability discovered by Francesco Carlucci in WordPress Plugin ChatBot versions = 5.3.4...

7.7CVSS5.3AI score0.00153EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2026/02/03 3:17 p.m.4 views

WordPress AI ChatBot plugin <= 5.3.4 - Missing Authorization via openai_file_list_callback vulnerability

Missing Authorization via openaifilelistcallback vulnerability discovered by Francesco Carlucci in WordPress Plugin ChatBot versions = 5.3.4...

5CVSS5.3AI score0.00376EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2025/11/27 11:30 a.m.5 views

WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.7.0 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter vulnerability

Unauthenticated Server-Side Request Forgery via 'pineconeurl' Parameter vulnerability discovered by blue0x1 in WordPress Plugin AI ChatBot with ChatGPT and Content Generator by AYS versions = 2.7.0...

6.5CVSS7.1AI score0.00149EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2025/11/18 12:0 a.m.2 views

WordPress ChatBot plugin missing authorization vulnerability

WordPress ChatBot plugin is a tool that provides live chat and AI chatbot functionality for WordPress websites, helping users to instantly communicate with visitors, increase customer satisfaction and optimize sales conversions. WordPress ChatBot plugin suffers from a lack of authorization...

5.3CVSS6.8AI score0.00057EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/13 9:24 a.m.7 views

CVE-2025-64277 WordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through = 7.3.9...

5.3CVSS0.00057EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.2 views

WordPress plugin ChatBot 安全漏洞

WordPress ChatBot plugin is a tool that provides live chat and AI chatbot functionality for WordPress websites, helping users to instantly communicate with visitors, increase customer satisfaction and optimize sales conversions. WordPress ChatBot plugin suffers from a lack of authorization...

5.3CVSS6.5AI score0.00057EPSS
Exploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.12 views

CVE-2025-62952

CVE-2025-62952 is a Missing Authorization/Broken Access Control vulnerability in WordPress ChatBot plugin (versions up to and including 7.7.3). Public sources (NVD/Red Hat/EUVD/CVE list) describe an access-control bypass that could allow an attacker to exploit improper access controls. The assign...

4.3CVSS5.9AI score0.00042EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.2 views

WordPress plugin ChatBot 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.5AI score0.00042EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-47108

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00151EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-28045

Malicious code in bioql PyPI...

5.9CVSS5.4AI score0.00207EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-57845

Malicious code in bioql PyPI...

9.8CVSS9.3AI score0.00362EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-34203

Malicious code in bioql PyPI...

4.8CVSS5.2AI score0.00123EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-54124

Malicious code in bioql PyPI...

4.8CVSS5.4AI score0.00122EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-57846

Malicious code in bioql PyPI...

5.4CVSS7.4AI score0.0006EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-57579

Malicious code in bioql PyPI...

5.3CVSS7.5AI score0.00365EPSS
Exploits1References3
Rows per page
Query Builder