Lucene search
+L

13 matches found

NVD
NVD
•added 2026/10/05 7:17 p.m.•20 views

CVE-2026-97305

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/05 6:08 p.m.•21 views

CVE-2026-97305

The Themeisle AI Chatbot for WordPress – Hyve Lite plugin (versions

6.9CVSS6AI score0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/05 6:08 p.m.•35 views

CVE-2026-97305 WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS0.00254EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/05 6:08 p.m.•13 views

EUVD-2026-92586

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS6AI score0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/05 6:08 p.m.•15 views

CVE-2026-97305 WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS6AI score0.00254EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•14 views

CVE-2026-97305: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS6AI score0.00254EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•11 views

PT-2026-106097

Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through 2.0.2...

6.9CVSS6AI score0.00254EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/03 5:41 p.m.•15 views

WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin AI Chatbot for WordPress – Hyve Lite versions = 2.0.2...

6.9CVSS5.8AI score0.00254EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 11:39 a.m.•21 views

CVE-2025-24666

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Stored XSS.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through = 1.2.2...

5.9CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/24 5:24 p.m.•13 views

CVE-2025-24666 WordPress Hyve Lite plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Stored XSS.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through = 1.2.2...

5.9CVSS8.6AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/24 5:24 p.m.•63 views

CVE-2025-24666

CVE-2025-24666 : The WordPress plugin AI Chatbot for WordPress – Hyve Lite contains a cross-site scripting vulnerability due to improper input neutralization during web page generation. Affects Hyve Lite versions from n/a up to and including 1.2.2 (Stored XSS). The CVSSv3.1 base score is 5.9 (Med...

5.9CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•17 views

PT-2025-5487 · WordPress · Ai Chatbot For Wordpress – Hyve Lite

Name of the Vulnerable Software and Affected Versions: AI Chatbot for WordPress – Hyve Lite versions 1.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

5.9CVSS5.9AI score0.00354EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•6 views

CVE-2025-24666: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Stored XSS.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through = 1.2.2...

5.9CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Rows per page
Query Builder