Advisories · Technology
WPBot.
Every CVE that names WPBot among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
WPBot 8.7.2 - 8.7.5 - Subscriber+ Claude AI Settings Update
- WPBot
- Broken access control
- CVSS 5.3 Medium
WPBot < 8.5.7 - Unauthenticated AI Provider API Abuse via Multiple AJAX Actions
- WPBot
- Broken access control
- CVSS 5.3 Medium
WPBot 8.4.9 - 8.5.9 - Unauthenticated Chat Visitor PII Disclosure
- WPBot
- Information disclosure
- CVSS 3.8 Low
WPBot AI ChatBot < 8.5.2 - Admin+ Second-Order SQL Injection via qc_bot_str_fields
- WPBot
- SQL injection
- CVSS 4.3 Medium
WPBot AI ChatBot < 8.2.0 - Subscriber+ RAG Settings Update
- WPBot
- Broken access control