Lucene search

K

WpvulndbWPVDB-ID:FF7077AC-380F-45AF-BFDC-F04498FA6121

HistoryApr 29, 2024 - 12:00 a.m.

Conversational Forms for ChatBot < 1.2.0 - Unauthenticated Arbitrary File Download

2024-04-2900:00:00

wpscan.com

8

chatbot

wordpress

unauthenticated

arbitrary file download

vulnerability

AI Score

7

Confidence

High

Description The ChatBot Conversational Forms plugin for WordPress is vulnerable to Arbitrary File Download in all versions up to, and including, 1.1.8. This makes it possible for unauthenticated attackers to download arbitrary files from the server which may contain sensitive information.

References

www.wordfence.com/threat-intel/vulnerabilities/id/54db4d53-7c4f-47d9-811d-8282eaf2d074

AI Score

7

Confidence

High

Related for WPVDB-ID:FF7077AC-380F-45AF-BFDC-F04498FA6121