Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 3:12 p.m.•17 views

CVE-2026-3506

The WP-Chatbot for Messenger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the...

5.3CVSS5.8AI score0.00474EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/21 6:30 a.m.•17 views

EUVD-2026-13998

The WP-Chatbot for Messenger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the...

5.3CVSS5.8AI score0.00474EPSS
SaveExploits0References9
NVD
NVD
•added 2026/03/21 4:17 a.m.•22 views

CVE-2026-3506

The WP-Chatbot for Messenger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the...

5.3CVSS0.00474EPSS
SaveExploits0References8
CVE
CVE
•added 2026/03/21 3:26 a.m.•36 views

CVE-2026-3506

WP-Chatbot for Messenger plugin for WordPress (up to version 4.9) suffers an authorization bypass due to improper verification of user permissions, enabling unauthenticated attackers to overwrite the site’s MobileMonkey API token and company ID options . This can hijack chatbot configuration and ...

5.3CVSS5.7AI score0.00474EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/03/21 3:26 a.m.•47 views

CVE-2026-3506 WP-Chatbot for Messenger <= 4.9 - Missing Authorization to Unauthenticated Chatbot Configuration Takeover

The WP-Chatbot for Messenger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the...

5.3CVSS0.00474EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/03/21 3:26 a.m.•11 views

CVE-2026-3506 WP-Chatbot for Messenger <= 4.9 - Missing Authorization to Unauthenticated Chatbot Configuration Takeover

The WP-Chatbot for Messenger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the...

5.3CVSS5.7AI score0.00474EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/21 12:00 a.m.•7 views

CVE-2026-3506: Missing Authorization

The WP-Chatbot for Messenger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.9. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the...

5.3CVSS5.7AI score0.00474EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/21 12:00 a.m.•23 views

WordPress plugin WP-Chatbot for Messenger 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

5.3CVSS5.8AI score0.00474EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2023-36824

Malicious code in bioql PyPI...

5.4CVSS9.1AI score0.00598EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:45 a.m.•12 views

CVE-2023-32581

Missing Authorization vulnerability in MobileMonkey WP-Chatbot for Messenger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Chatbot for Messenger: from n/a through 4.7...

5.4CVSS8.5AI score0.00598EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/13 3:15 p.m.•22 views

CVE-2023-32581

Missing Authorization vulnerability in MobileMonkey WP-Chatbot for Messenger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Chatbot for Messenger: from n/a through 4.7...

5.4CVSS0.00598EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:23 p.m.•28 views

CVE-2023-32581 WordPress WP-Chatbot for Messenger plugin <= 4.7 - Broken Access Control

Missing Authorization vulnerability in MobileMonkey WP-Chatbot for Messenger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Chatbot for Messenger: from n/a through 4.7...

5.4CVSS0.00598EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:23 p.m.•20 views

CVE-2023-32581 WordPress WP-Chatbot for Messenger plugin <= 4.7 - Broken Access Control

Missing Authorization vulnerability in larrykim WP-Chatbot for Messenger wp-chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Chatbot for Messenger: from n/a through = 4.7...

5.4CVSS8.3AI score0.00598EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•5 views

CVE-2023-32581: Missing Authorization

Missing Authorization vulnerability in MobileMonkey WP-Chatbot for Messenger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Chatbot for Messenger: from n/a through 4.7...

5.4CVSS5.9AI score0.00598EPSS
SaveExploits0References1
Rows per page
Query Builder