Lucene search
+L

100 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•1 views

CVE-2026-83593: Improper Neutralization of Input During Web Page Generation

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.7.3 due to insufficient input sanitization and output escaping. This makes it possible f...

7.2CVSS6AI score0.00527EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/16 12:00 a.m.•1 views

CVE-2026-15106: Missing Authorization

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

5.3CVSS5.8AI score0.00474EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/16 12:00 a.m.•2 views

CVE-2026-15610: Missing Authorization

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

4.3CVSS5.6AI score0.00403EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/01 12:00 a.m.•0 views

CVE-2026-13731: Improper Neutralization of Input During Web Page Generation

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.4.9 due to insufficient input sanitization and output escaping. This makes it possible f...

7.2CVSS6AI score0.00889EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/01 12:00 a.m.•35 views

PT-2026-54475

Name of the Vulnerable Software and Affected Versions WPBot – AI ChatBot for Live Support, Lead Generation, AI Services versions prior to 8.5.0 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique...

7.2CVSS6.1AI score0.00889EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•0 views

CVE-2025-13887: Improper Neutralization of Input During Web Page Generation

The AI BotKit – AI Chatbot & Live Support for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in the aibotkitwidget shortcode in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS6AI score0.00218EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2008-5753

Malware in sbrugna...

7.5CVSS6.4AI score0.0337EPSS
SaveExploits3References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2007-2767

Malware in sbrugna...

10CVSS6.4AI score0.04547EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2006-5910

Malware in sbrugna...

7.5CVSS6.4AI score0.01161EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2011-5081

Malware in sbrugna...

4.3CVSS6.4AI score0.10428EPSS
SaveExploits2References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2008-2757

Malware in sbrugna...

3.5CVSS6.4AI score0.00892EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-16719

Malware in sbrugna...

5.4CVSS5.6AI score0.00602EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2008-2756

Malware in sbrugna...

6.5CVSS6.4AI score0.00986EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2006-1414

Malware in sbrugna...

4.3CVSS6.4AI score0.01296EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-43304

Malicious code in bioql PyPI...

7.5CVSS6.5AI score0.00446EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:48 p.m.•13 views

CVE-2020-23983

Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags...

5.4CVSS6.7AI score0.00602EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:11 a.m.•14 views

CVE-2024-49235

Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video Messages live-support-tickets allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through = 1.10.2...

7.5CVSS5.9AI score0.00446EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/17 5:24 p.m.•50 views

CVE-2024-49235 WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video Messages live-support-tickets allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through = 1.10.2...

7.5CVSS0.00446EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/17 12:00 a.m.•2 views

CVE-2024-49235: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video Messages live-support-tickets allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through = 1.10.2...

7.5CVSS5.8AI score0.00446EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/17 12:00 a.m.•18 views

PT-2024-33372 · Videowhisper.Com · Videowhisper.Com Contact Forms +3

Name of the Vulnerable Software and Affected Versions: VideoWhisper.Com Contact Forms, Live Support, CRM, Video Messages versions 1.10.2 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This affects...

7.5CVSS6.7AI score0.00446EPSS
SaveExploits0References4
Rows per page
Query Builder