Lucene search
K

1134 matches found

Cvelist
Cvelist
added 2025/11/13 9:24 a.m.7 views

CVE-2025-64277 WordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through = 7.3.9...

5.3CVSS0.00234EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/13 9:24 a.m.2 views

CVE-2025-64277 WordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through = 7.3.9...

5.3CVSS6.6AI score0.00234EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.5 views

PT-2025-46808

Name of the Vulnerable Software and Affected Versions QuantumCloud ChatBot versions through 7.3.9 Description An authorization issue exists in QuantumCloud ChatBot that allows exploitation of incorrectly configured access control security levels. Recommendations Update QuantumCloud ChatBot to a...

5.3CVSS6.6AI score0.00234EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.2 views

WordPress plugin ChatBot 安全漏洞

WordPress ChatBot plugin is a tool that provides live chat and AI chatbot functionality for WordPress websites, helping users to instantly communicate with visitors, increase customer satisfaction and optimize sales conversions. WordPress ChatBot plugin suffers from a lack of authorization...

5.3CVSS6.5AI score0.00234EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.3 views

Typebot 代码问题漏洞

Typebot is an open source chatbot builder by the individual developer Baptiste Arnaud. A code issue vulnerability exists in versions prior to Typebot 3.13.1 that stems from a server-side request forgery in the Typebot webhook block functionality, which could lead to the extraction of AWS IAM...

9.9CVSS6.8AI score0.00328EPSS
Exploits1References2
EUVD
EUVD
added 2025/11/06 6:32 p.m.1 views

EUVD-2025-38082

Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through = 2.6.6...

7.5CVSS6.4AI score0.01165EPSS
Exploits0References2
NVD
NVD
added 2025/11/06 4:16 p.m.15 views

CVE-2025-62039

Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through = 2.6.6...

7.5CVSS0.01165EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:55 p.m.4 views

CVE-2025-62039 WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.6.6 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through = 2.6.6...

7.5CVSS6.5AI score0.01165EPSS
Exploits0References1
CVE
CVE
added 2025/11/06 3:55 p.m.11 views

CVE-2025-62039

Summary (CVE-2025-62039) Insertion of Sensitive Information Into Sent Data affects the WordPress plugin “AI ChatBot with ChatGPT and Content Generator by AYS” (versions up to 2.6.6). The issue allows retrieval of embedded sensitive data from sent data, as described by multiple sources. CVSS v3.1 ...

7.5CVSS6.5AI score0.01165EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/06 3:55 p.m.9 views

CVE-2025-62039 WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.6.6 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through = 2.6.6...

7.5CVSS0.01165EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/27 3:30 a.m.4 views

EUVD-2025-35990

Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through = 7.3.0...

6.5AI score0.00197EPSS
Exploits0References2
NVD
NVD
added 2025/10/27 2:15 a.m.4 views

CVE-2025-62952

Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through = 7.7.3...

4.3CVSS0.00197EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.12 views

CVE-2025-62952 WordPress ChatBot plugin <= 7.7.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through = 7.7.3...

4.3CVSS0.00197EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.3 views

CVE-2025-62952 WordPress ChatBot plugin <= 7.7.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through = 7.7.3...

4.3CVSS5.9AI score0.00197EPSS
Exploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.14 views

CVE-2025-62952

CVE-2025-62952 is a Missing Authorization/Broken Access Control vulnerability in WordPress ChatBot plugin (versions up to and including 7.7.3). Public sources (NVD/Red Hat/EUVD/CVE list) describe an access-control bypass that could allow an attacker to exploit improper access controls. The assign...

4.3CVSS5.9AI score0.00197EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.3 views

WordPress plugin ChatBot 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.5AI score0.00197EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/26 7:3 p.m.2 views

Malicious code in astra-db-chatbot-starter (npm)

The package astra-db-chatbot-starter was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/10/26 7:3 p.m.1 views

MAL-2025-48614 Malicious code in astra-db-chatbot-starter (npm)

The package astra-db-chatbot-starter was found to contain malicious code...

7AI score
Exploits0
CNNVD
CNNVD
added 2025/10/25 12:0 a.m.6 views

WordPress plugin AI Chatbot Free Models - Customer Support, Live Chat, Virtual Assistant Security Breach

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

4.3CVSS5.8AI score0.00262EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/10/24 11:34 p.m.6 views

WordPress AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant plugin <= 1.6.5 - Unauthenticated CSV Injection vulnerability

Unauthenticated CSV Injection vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin AI Chatbot Free Models versions = 1.6.5...

4.3CVSS7AI score0.00262EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder