QuantumCloud / Wpbot
27 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-9111 | WPBOT < 7.1.0 - Admin+ Stored XSS | LOW | 3.5 | Sep 9, 2025 |
| CVE-2025-0329 | AI ChatBot for WordPress – WPBot < 6.2.4 - Admin+ Stored XSS | MEDIUM | 4.8 | May 15, 2025 |
| CVE-2024-6669 | AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting | MEDIUM | 5.5 | Jul 17, 2024 |
| CVE-2024-0453 | AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback | HIGH | 7.7 | May 22, 2024 |
| CVE-2024-0452 | AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback | HIGH | 7.7 | May 22, 2024 |
| CVE-2024-0451 | AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback | MEDIUM | 5.0 | May 22, 2024 |
| CVE-2024-22309 | WordPress ChatBot Plugin <= 5.1.0 is vulnerable to PHP Object Injection | CRITICAL | 9.8 | Jan 24, 2024 |
| CVE-2023-48741 | WordPress ChatBot Plugin <= 4.7.8 is vulnerable to SQL Injection | HIGH | 7.6 | Dec 19, 2023 |
| CVE-2023-5606 | The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficient input sanitizati… | MEDIUM | 4.8 | Nov 2, 2023 |
| CVE-2023-5533 | AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions | CRITICAL | 9.8 | Oct 20, 2023 |
| CVE-2023-5534 | AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions | MEDIUM | 5.4 | Oct 20, 2023 |
| CVE-2023-5254 | AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user | MEDIUM | 5.3 | Oct 19, 2023 |
| CVE-2023-5212 | AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file | CRITICAL | 9.6 | Oct 19, 2023 |
| CVE-2023-5204 | AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response | CRITICAL | 9.8 | Oct 19, 2023 |
| CVE-2023-5241 | AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file | CRITICAL | 9.6 | Oct 19, 2023 |
| CVE-2023-44993 | WordPress ChatBot Plugin <= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF) | HIGH | 8.8 | Oct 9, 2023 |
| CVE-2023-4253 | Chatbot < 4.7.8 - Admin+ Stored XSS in FAQ Builder | MEDIUM | 4.8 | Sep 4, 2023 |
| CVE-2023-4254 | Chatbot < 4.7.8 - Admin+ Stored XSS in Language Settings | MEDIUM | 4.8 | Sep 4, 2023 |
| CVE-2023-3175 | AI ChatBot < 4.6.1 - Admin+ Stored Cross-Site Scripting | MEDIUM | 4.8 | Jul 10, 2023 |
| CVE-2023-2742 | AI ChatBot < 4.5.5 - Admin+ Stored Cross-Site Scripting | MEDIUM | 4.8 | Jun 19, 2023 |
| CVE-2023-2811 | AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting | MEDIUM | 4.8 | Jun 19, 2023 |
| CVE-2023-1649 | ChatBot < 4.5.1 - Admin+ Stored XSS | MEDIUM | 4.8 | May 8, 2023 |
| CVE-2023-1650 | ChatBot < 4.4.7 - Unauthenticated PHP Object Injection | CRITICAL | 9.8 | May 8, 2023 |
| CVE-2023-1651 | ChatBot < 4.4.9 - Subscriber+ OpenAI Settings Update to Stored XSS | MEDIUM | 5.4 | May 8, 2023 |
| CVE-2023-1011 | ChatBot < 4.4.5 - Stored XSS via CSRF | MEDIUM | 6.1 | May 8, 2023 |
Showing 1 to 25 of 27 CVEs