Lucene search
K

6 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/25 1:50 a.m.1 views

CVE-2026-25124

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the OpenEMR application is vulnerable to an access control flaw that allows low-privileged users, such as receptionists, to export the entire message list containing...

6.5CVSS5.5AI score0.00047EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2025/10/25 12:0 a.m.2 views

WordPress plugin AI Chatbot Free Models - Customer Support, Live Chat, Virtual Assistant Security Breach

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

4.3CVSS5.8AI score0.00187EPSS
Exploits0References3
NVD
NVD
added 2025/10/24 1:15 p.m.1 views

CVE-2025-11576

The AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.6.5. This is due to insufficient sanitization in the 'newcodebytechatbotexportmessages' function. This makes it possible for...

4.3CVSS0.00187EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/24 12:29 p.m.3 views

CVE-2025-11576 AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant <= 1.6.5 - Unauthenticated CSV Injection

The AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.6.5. This is due to insufficient sanitization in the 'newcodebytechatbotexportmessages' function. This makes it possible for...

4.3CVSS0.00187EPSS
Exploits0References2
CVE
CVE
added 2025/10/24 12:29 p.m.13 views

CVE-2025-11576

CVE-2025-11576 affects the WordPress plugin AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant, versions up to and including 1.6.5. The root cause is insufficient sanitization in the function newcodebyte_chatbot_export_messages, allowing unauthenticated CSV injection that can...

4.3CVSS6.4AI score0.00187EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/24 12:0 a.m.2 views

PT-2025-43615

Name of the Vulnerable Software and Affected Versions AI Chatbot Free Models plugin for WordPress versions up to and including 1.6.5 Description The AI Chatbot Free Models plugin for WordPress is susceptible to CSV Injection due to inadequate input sanitization within the newcodebyte chatbot expo...

4.3CVSS7.2AI score0.00187EPSS
Exploits0References5
Rows per page
Query Builder