Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in WPBot – AI ChatBot for Live Support, Lead Generation, AI Services, with AI-generated Chinese analysis, references, and POCs.

Vendor: quantumcloud

CVE IDTitleCVSSSeverityPublished
CVE-2024-6669 AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CWE-79 5.5 Medium2024-07-17
CVE-2024-0453 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback CWE-284 5.0 Medium2024-05-22
CVE-2024-0451 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback CWE-284 5.0 Medium2024-05-22
CVE-2024-0452 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback CWE-284 5.0 Medium2024-05-22
CVE-2023-5533 AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions CWE-862 5.3 Medium2023-10-20
CVE-2023-5534 AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions CWE-352 4.3 Medium2023-10-20
CVE-2023-5254 AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user CWE-200 5.3 Medium2023-10-19
CVE-2023-5212 AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file CWE-22 9.6 Critical2023-10-19
CVE-2023-5241 AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file CWE-22 9.6 Critical2023-10-19
CVE-2023-5204 AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response CWE-89 9.8 Critical2023-10-19

All 10 known CVE vulnerabilities affecting WPBot – AI ChatBot for Live Support, Lead Generation, AI Services with full Chinese analysis, references, and POCs where available.