CVE-2026-15241

The CVE-2026-15241 entry concerns the AI ChatBot for WooCommerce WordPress plugin (pre-4.8.4). The flaw is a missing authorization/nonce check on an AJAX action, allowing unauthenticated users to misuse the site owner’s stored third-party API key to send requests billed to the owner’s account, an...