Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-111372— AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action

Quick assessment

Affected
quantumcloud AI ChatBot for WooCommerce – WoowBot
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress 插件"WooCommerce 的 AI 聊天机器人 – WoowBot"在 5.0.0 及之前的所有版本中存在授权绕过漏洞。该漏洞源于插件未正确验证用户是否具备执行特定操作的权限。这使得拥有订阅者（subscriber）级别及以上权限的已认证攻击者能够反复触发 RAG（检索增强生成）文档同步操作，从而向 OpenAI、Gemini、OpenRouter 或 xAI 发起需付费的嵌入（embedding）API 调用。这些调用将使用站点管理员存储的 API 密钥进行计费，导致其 AI API 额度

CVSS 4.3 · Medium EPSS 0.27% · P19

Affected Version Matrix 1

VendorProduct Version RangeStatus
quantumcloud AI ChatBot for WooCommerce – WoowBot ≤ 5.0.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-111372

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action
Source: CVE Program / CVE List V5
Vulnerability Description
The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.0.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to repeatedly trigger RAG document sync operations that issue paid embedding API calls to OpenAI, Gemini, OpenRouter, or xAI charged to the site administrator's stored API key, draining their AI API credits and causing financial loss. The wp_chatbot nonce required to reach this endpoint is emitted to every authenticated frontend visitor via wp_localize_script, making it trivially obtainable by any subscriber-level account.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
quantumcloud AI ChatBot for WooCommerce – WoowBot 0 ~ 5.0.0 -

II. Public POCs for CVE-2026-111372

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-111372

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-111372 (1)

IV. Related Vulnerabilities

Same vendor: quantumcloud
Same weakness: CWE-862