CVE-2026-16774: Missing Authorization

The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.5.9 via the wpcssendemail AJAX handler. This is due to the wpcssendemail function being registered on both wpajaxwpcssendemail and wpajaxnoprivwpcssendemail with no nonce verification,...

PT-2025-42705

Name of the Vulnerable Software and Affected Versions Kognetiks Chatbot plugin for WordPress versions prior to 2.3.6 Description The Kognetiks Chatbot plugin for WordPress is susceptible to unauthorized data modification because of a missing capability check in several functions. This allows...

CVE-2023-5533: Missing Authorization

The AI ChatBot plugin for WordPress is vulnerable to unauthorized use of AJAX actions due to missing capability checks on the corresponding functions in versions up to, and including, 4.8.9 as well as 4.9.2. This makes it possible for unauthenticated attackers to perform some of those actions tha...