WordPress Plugin: conversational-forms: CVE-2024-32729: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in QuantumCloud Conversational Forms for ChatBot allows Path Traversal. This issue affects Conversational Forms for ChatBot: from n/a through 1.1.8...

CVE-2025-60223: Improper Limitation of a Pathname to a Restricted Directory

Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot = 13.6.5 versions...

PT-2026-50276

Name of the Vulnerable Software and Affected Versions WPBot Pro Wordpress Chatbot versions prior to 13.6.6 Description A subscriber can perform arbitrary file deletion within the software...

youtuber-ai-chatbot (0.1.0) potentially affected by CVE-2026-55443 via langchain (0.0.79)

langchain PYPI version 0.0.79 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - youtuber-ai-chatbot 0.1.0 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

chattdd (>=0.1.3, <=0.2.2), conlang-gpt (0.4.0) +4 more potentially affected by CVE-2026-55443 via langchain (0.0.314)

langchain PYPI version 0.0.314 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - chattdd =0.1.3, =1.1.0, =1.0.37, =0.1.0, =0.4.0, =0.6.1 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

byzerllm (>=0.1.184, <=0.1.190), hspylib-askai (1.0.9) +2 more potentially affected by CVE-2026-55443 via langchain (0.2.7)

langchain PYPI version 0.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - byzerllm =0.1.184, =1.0.0, =0.1.4, =0.1.23 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

An AI Security Agent for Banking: Multi-Vector Fraud and AML Detection across Retail and Corporate Accounts

Banks simultaneously face signature-based fraud card-not-present attacks, account takeover, ATM cloning and behavioural financial crime structuring, layering, mule networks, business email compromise -- two threat families with fundamentally different detection requirements. Static rule engines...

EUVD-2026-36991

Subscriber Broken Access Control in ChatBot = 7.9.7 versions...

CVE-2026-40788

Subscriber Broken Access Control in ChatBot = 7.9.7 versions...

CVE-2026-49082 WordPress Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons plugin <= 1.4.8 - Sensitive Data Exposure vulnerability

Subscriber Sensitive Data Exposure in Chatway Live Chat AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons = 1.4.8 versions...

EUVD-2026-36878

Subscriber Sensitive Data Exposure in Chatway Live Chat AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons = 1.4.8 versions...

CVE-2026-40788 WordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerability

Subscriber Broken Access Control in ChatBot = 7.9.7 versions...

CVE-2026-40788

CVE-2026-40788 affects WordPress ChatBot plugin versions

CVE-2026-40788 WordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerability

Subscriber Broken Access Control in ChatBot = 7.9.7 versions...

CVE-2026-40788: Missing Authorization

Subscriber Broken Access Control in ChatBot = 7.9.7 versions...

PT-2026-49426

Subscriber Broken Access Control in ChatBot = 7.9.7 versions...

An AI Security Agent for University ACMIS: Multi-Vector Threat Detection and Automated Response

University Academic Management Information Systems ACMIS are high-value targets for a wide spectrum of security threats including brute-force login attacks, payment fraud, privilege escalation, insider data theft, and academic integrity violations. Traditional rule-based intrusion detection syste...

WordPress Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons plugin <= 1.4.8 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by dodoh4t in WordPress Plugin Chatway Live Chat AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons versions = 1.4.8...

CVE-2026-2955 AI Chatbot & Workflow Automation by AIWU <= 1.4.14 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' header in versions up to, and including, 1.4.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...

CVE-2026-2955: Improper Neutralization of Input During Web Page Generation

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' header in versions up to, and including, 1.4.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers...