Lucene search
+L

16 matches found

NVD
NVD
•added 2026/10/05 7:17 p.m.•20 views

CVE-2026-97305

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/05 6:08 p.m.•21 views

CVE-2026-97305

The Themeisle AI Chatbot for WordPress – Hyve Lite plugin (versions

6.9CVSS6AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/05 6:08 p.m.•35 views

CVE-2026-97305 WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS0.00254EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/05 6:08 p.m.•13 views

EUVD-2026-92586

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS6AI score0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/05 6:08 p.m.•15 views

CVE-2026-97305 WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS6AI score0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•14 views

CVE-2026-97305: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS6AI score0.00254EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•11 views

PT-2026-106097

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS6AI score0.00254EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/03 5:41 p.m.•15 views

WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin AI Chatbot for WordPress – Hyve Lite versions = 2.0.2...

6.9CVSS5.8AI score0.00254EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:39 a.m.•20 views

CVE-2025-24666

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Stored XSS.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through = 1.2.2...

5.9CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/24 5:24 p.m.•13 views

CVE-2025-24666 WordPress Hyve Lite plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Stored XSS.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through = 1.2.2...

5.9CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/24 5:24 p.m.•28 views

CVE-2025-24666 WordPress Hyve Lite plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Stored XSS.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through = 1.2.2...

5.9CVSS0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/24 5:24 p.m.•62 views

CVE-2025-24666

CVE-2025-24666 : The WordPress plugin AI Chatbot for WordPress – Hyve Lite contains a cross-site scripting vulnerability due to improper input neutralization during web page generation. Affects Hyve Lite versions from n/a up to and including 1.2.2 (Stored XSS). The CVSSv3.1 base score is 5.9 (Med...

5.9CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/24 11:47 a.m.•17 views

WordPress Hyve Lite plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Caesar Evan Santoso in WordPress Plugin AI Chatbot for WordPress – Hyve Lite versions = 1.2.2...

5.9CVSS6.1AI score0.00354EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•17 views

PT-2025-5487 · WordPress · Ai Chatbot For Wordpress – Hyve Lite

Name of the Vulnerable Software and Affected Versions: AI Chatbot for WordPress – Hyve Lite versions 1.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

5.9CVSS5.9AI score0.00354EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•20 views

WordPress Plugin AI Chatbot for WordPress – Hyve Lite Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin AI Chatbot...

5.9CVSS8AI score0.00354EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•6 views

CVE-2025-24666: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Stored XSS.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through = 1.2.2...

5.9CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Rows per page
Query Builder