WoowBot < 4.8.4 Unauthenticated Gemini API Key Abuse (CVE-2026-15241)

wpscan.com 2026-08-02查看中文 →

Security AdvisoryCVE-2026-15241MediumWoowBot

Affected:

ChatBot for eCommerce – WoowBot < 4.8.4

Fixed in:

4.8.4

Referenced CVEs: CVE-2026-15241

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WordPress Simple Membership Pre-Auth Admin Account Takeover via Username Collision (CVE-2026-15930) 2026-08-03 Simply Schedule Appointments <1.6.12.11 Incorrect Authorisation Vulnerability (CVE-2026-15254) 2026-08-03 TaxoPress simple-tags < 3.51.0 IDOR Allows Private Post Disclosure (CVE-2026-15231) 2026-08-03 Simple Membership < 4.7.8 Unauthenticated Stored XSS (CVE-2026-15931) 2026-08-03 Dokan Lite < 5.0.9 IDOR Vulnerability via REST API (CVE-2026-16565) 2026-08-03

Offline Archive

Offline screenshot & PDF are Pro-exclusive