CVE-2025-69134

Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper = 1.1.4 versions...

EUVD-2025-210403

Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper = 1.1.4 versions...

CVE-2025-69134: Missing Authorization

Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper = 1.1.4 versions...

CVE-2026-57362: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in ChatBot = 8.3.2 versions...

PT-2026-55005

Unauthenticated Cross Site Scripting XSS in ChatBot = 8.3.2 versions...

PT-2026-54964

Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper = 1.1.4 versions...

Azure AI Bot Service Authentication Privilege Escalation

The vulnerability of the Azure AI Bot Service, a cloud platform for creating and deploying intelligent chatbots, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to increase their privileges remotely...

WordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by HaiND in WordPress Plugin ChatBot versions = 8.3.2...

WordPress WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by PRISM in WordPress Plugin ChatBot versions = 8.4.9...

CVE-2026-13731: Improper Neutralization of Input During Web Page Generation

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.4.9 due to insufficient input sanitization and output escaping. This makes it possible f...

WordPress OpenAI Chatbot for WordPress – Helper plugin <= 1.1.4 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Denver Jackson in WordPress Plugin OpenAI Chatbot for WordPress – Helper versions = 1.1.4...

ShieldPatch

🛡️ ShieldPatch Predict . Protect . Prevail AI-driven vuln...

Malicious code in lc-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ca324fdc9c4ba5536abcd43972f1a506f4af99ace29447b66a17947b1b8606 package.json declares both preinstall and postinstall scripts that run node callback.js, so the callback fires automatically on npm install with no...

MAL-2026-6559 Malicious code in lc-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ca324fdc9c4ba5536abcd43972f1a506f4af99ace29447b66a17947b1b8606 package.json declares both preinstall and postinstall scripts that run node callback.js, so the callback fires automatically on npm install with no...

AI Reconnaissance: The Missing Layer in Chatbot Security

...

byzerllm (>=0.1.184, <=0.1.190), hspylib-askai (1.0.9) +2 more potentially affected by CVE-2026-55443 via langchain (0.2.7)

langchain PYPI version 0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - byzerllm =0.1.184, =1.0.0, =0.1.4, =0.1.23 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

youtuber-ai-chatbot (0.1.0) potentially affected by CVE-2026-55443 via langchain (0.0.79)

langchain PYPI version 0.0.79 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - youtuber-ai-chatbot 0.1.0 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

EUVD-2025-210225

Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot = 13.6.5 versions...

EUVD-2024-55632

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in QuantumCloud Conversational Forms for ChatBot allows Path Traversal. This issue affects Conversational Forms for ChatBot: from n/a through 1.1.8...

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

Cybersecurity researchers have flagged a "coordinated malware campaign" on the JetBrains Marketplace that has published no less than 15 malicious plugins capable of exfiltrating artificial intelligence AI provider keys. "Every plugin poses as an AI coding assistant built on DeepSeek and other lar...