Lucene search
+L

116 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•11 views

CVE-2026-83593: Improper Neutralization of Input During Web Page Generation

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.7.3 due to insufficient input sanitization and output escaping. This makes it possible f...

7.2CVSS6AI score0.00527EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/28 12:00 a.m.•9 views

CVE-2026-16773: Exposure of Sensitive Information to an Unauthorized Actor

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.5.9 via the wpbotsendemailtranscriptfree. This makes it possible for unauthenticated attackers to exfiltrate full chat...

5.3CVSS5.7AI score0.00475EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/16 12:00 a.m.•7 views

CVE-2026-15106: Missing Authorization

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

5.3CVSS5.9AI score0.00474EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/16 12:00 a.m.•10 views

CVE-2026-15610: Missing Authorization

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

4.3CVSS5.7AI score0.00403EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/01 12:00 a.m.•7 views

CVE-2026-13731: Improper Neutralization of Input During Web Page Generation

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.4.9 due to insufficient input sanitization and output escaping. This makes it possible f...

7.2CVSS6.1AI score0.00889EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/01 12:00 a.m.•43 views

PT-2026-54475

Name of the Vulnerable Software and Affected Versions WPBot – AI ChatBot for Live Support, Lead Generation, AI Services versions prior to 8.5.0 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique...

7.2CVSS6.1AI score0.00889EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/07 12:00 a.m.•5 views

CVE-2025-13887: Improper Neutralization of Input During Web Page Generation

The AI BotKit – AI Chatbot & Live Support for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in the aibotkitwidget shortcode in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS6.1AI score0.00223EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2008-2757

Malware in sbrugna...

3.5CVSS6.4AI score0.00892EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2006-5910

Malware in sbrugna...

7.5CVSS6.4AI score0.01192EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2007-2767

Malware in sbrugna...

10CVSS6.4AI score0.04547EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2008-5753

Malware in sbrugna...

7.5CVSS6.4AI score0.0337EPSS
SaveExploits3References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2006-1414

Malware in sbrugna...

4.3CVSS6.4AI score0.01296EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2008-2756

Malware in sbrugna...

6.5CVSS6.4AI score0.00986EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2011-5081

Malware in sbrugna...

4.3CVSS5.8AI score0.10428EPSS
SaveExploits3References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2020-16719

Malware in sbrugna...

5.4CVSS6AI score0.00602EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2024-43304

Malicious code in bioql PyPI...

7.5CVSS6.5AI score0.00446EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:48 p.m.•21 views

CVE-2020-23983

Michael-design iChat Realtime PHP Live Support System 1.6 has persistent Cross-site Scripting via chat,text-filed tags...

5.4CVSS6.7AI score0.00602EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:11 a.m.•20 views

CVE-2024-49235

Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video Messages live-support-tickets allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through = 1.10.2...

7.5CVSS5.9AI score0.00446EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/17 5:24 p.m.•56 views

CVE-2024-49235 WordPress Contact Forms, Live Support, CRM, Video Messages plugin <= 1.10.2 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in videowhisper Contact Forms, Live Support, CRM, Video Messages live-support-tickets allows Retrieve Embedded Sensitive Data.This issue affects Contact Forms, Live Support, CRM, Video Messages: from n/a through = 1.10.2...

7.5CVSS0.00446EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/17 12:00 a.m.•24 views

PT-2024-33372 · Videowhisper.Com · Videowhisper.Com Contact Forms +3

Name of the Vulnerable Software and Affected Versions: VideoWhisper.Com Contact Forms, Live Support, CRM, Video Messages versions 1.10.2 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This affects...

7.5CVSS6.7AI score0.00446EPSS
SaveExploits0References4
Rows per page
Query Builder