Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 5.9

    MEDIUM
    CVE-2022-47613

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions.... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.12
    • Published: Mar. 29, 2023
    • Modified: May. 12, 2025

  • 8.8

    HIGH
    CVE-2023-44993

    Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.7.8 versions.... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.07
    • Published: Oct. 09, 2023
    • Modified: May. 12, 2025

  • 4.8

    MEDIUM
    CVE-2023-2742

    The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.08
    • Published: Jun. 19, 2023
    • Modified: May. 12, 2025

  • 5.5

    MEDIUM
    CVE-2024-6669

    The AI ChatBot for WordPress – WPBot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.7 due to insufficient input sanitization and output escaping. This makes it possible for au... Read more

    Affected Products : ai_chatbot wpbot
    • Published: Jul. 17, 2024
    • Modified: May. 12, 2025

  • 9.6

    CRITICAL
    CVE-2023-5241

    The AI ChatBot for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.8.9 as well as 4.9.2 via the qcld_openai_upload_pagetraining_file function. This allows subscriber-level attackers to append "<?php" to any existing file... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %2.45
    • Published: Oct. 19, 2023
    • Modified: May. 12, 2025

  • 6.1

    MEDIUM
    CVE-2023-1011

    The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper CSRF check, allowing attackers to make a logged in admin set XSS payloads in them.... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.11
    • Published: May. 08, 2023
    • Modified: May. 12, 2025

  • 9.8

    CRITICAL
    CVE-2023-5533

    The AI ChatBot plugin for WordPress is vulnerable to unauthorized use of AJAX actions due to missing capability checks on the corresponding functions in versions up to, and including, 4.8.9 as well as 4.9.2. This makes it possible for unauthenticated atta... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.36
    • Published: Oct. 20, 2023
    • Modified: May. 12, 2025

  • 6.5

    MEDIUM
    CVE-2023-46841

    Recent x86 CPUs offer functionality named Control-flow Enforcement Technology (CET). A sub-feature of this are Shadow Stacks (CET-SS). CET-SS is a hardware feature designed to protect against Return Oriented Programming attacks. When enabled, traditional... Read more

    Affected Products : fedora xen
    • Published: Mar. 20, 2024
    • Modified: May. 12, 2025

  • 6.6

    MEDIUM
    CVE-2024-31396

    Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who can log in to the p... Read more

    Affected Products : a-blog_cms
    • Published: May. 22, 2024
    • Modified: May. 12, 2025

  • 4.4

    MEDIUM
    CVE-2024-30420

    Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32. If this vulnerability is exploited, a user with an administrator or higher privilege who... Read more

    Affected Products : a-blog_cms
    • Published: May. 22, 2024
    • Modified: May. 12, 2025

  • 6.1

    MEDIUM
    CVE-2024-31395

    Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series versions prior to Ver.2.10.53, and Ver... Read more

    Affected Products : a-blog_cms
    • Published: May. 22, 2024
    • Modified: May. 12, 2025

  • 6.5

    MEDIUM
    CVE-2024-31394

    Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series versions prior to Ver.2.10.53, and Ver.... Read more

    Affected Products : a-blog_cms
    • Published: May. 22, 2024
    • Modified: May. 12, 2025

  • 5.4

    MEDIUM
    CVE-2024-30419

    Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series versions prior to Ver.2.10.53, and Ver... Read more

    Affected Products : a-blog_cms
    • Published: May. 22, 2024
    • Modified: May. 12, 2025

  • 7.7

    HIGH
    CVE-2024-0453

    The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_delete_callback function in all versions up to, and including, 5.3.4. This makes it possible for authenticated atta... Read more

    Affected Products : ai_chatbot wpbot
    • Published: May. 22, 2024
    • Modified: May. 12, 2025

  • 7.7

    HIGH
    CVE-2024-0452

    The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_upload_callback function in all versions up to, and including, 5.3.4. This makes it possible for authenticated atta... Read more

    Affected Products : ai_chatbot wpbot
    • Published: May. 22, 2024
    • Modified: May. 12, 2025

  • 5.0

    MEDIUM
    CVE-2024-0451

    The AI ChatBot plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the openai_file_list_callback function in all versions up to, and including, 5.3.4. This makes it possible for authenticated attackers, w... Read more

    Affected Products : ai_chatbot wpbot
    • Published: May. 22, 2024
    • Modified: May. 12, 2025

  • 8.8

    HIGH
    CVE-2023-49330

    Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while getting aggregate report data.... Read more

    Affected Products : manageengine_adaudit_plus
    • Published: May. 20, 2024
    • Modified: May. 12, 2025

  • 2.7

    LOW
    CVE-2024-4198

    Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes which allows an attacker authenticated as team admin to demote users to guest via crafted HTTP requests. ... Read more

    Affected Products : mattermost_server
    • Published: Apr. 26, 2024
    • Modified: May. 12, 2025

  • 2.7

    LOW
    CVE-2024-4195

    Mattermost versions 9.6.0, 9.5.x before 9.5.3, and 8.1.x before 8.1.12 fail to fully validate role changes, which allows an attacker authenticated as a team admin to promote guests to team admins via crafted HTTP requests. ... Read more

    Affected Products : mattermost_server
    • Published: Apr. 26, 2024
    • Modified: May. 12, 2025

  • 6.5

    MEDIUM
    CVE-2024-4183

    Mattermost versions 8.1.x before 8.1.12, 9.6.x before 9.6.1, 9.5.x before 9.5.3, 9.4.x before 9.4.5 fail to limit the number of active sessions, which allows an authenticated attacker to crash the server via repeated requests to the getSessions API after ... Read more

    Affected Products : mattermost_server
    • Published: Apr. 26, 2024
    • Modified: May. 12, 2025
Showing 20 of 291741 Results