Latest CVE Feed

  1. Home
  2. Vulnerabilities
  3. Latest
Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
Latest Critical Actively Exploited Remotely Exploitable
Published Last Updated CVSS Score

  • 7.6

    HIGH
    CVE-2023-48741

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud AI ChatBot.This issue affects AI ChatBot: from n/a through 4.7.8. ... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.15
    • Published: Dec. 19, 2023
    • Modified: May. 12, 2025

  • 9.8

    CRITICAL
    CVE-2024-22309

    Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0. ... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.30
    • Published: Jan. 24, 2024
    • Modified: May. 12, 2025

  • 4.8

    MEDIUM
    CVE-2023-1649

    The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed ... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.09
    • Published: May. 08, 2023
    • Modified: May. 12, 2025

  • 9.8

    CRITICAL
    CVE-2023-1650

    The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauthenticated users, which could allow them to perform PHP Object Injection when a suitable gadget is present on the blog... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %44.45
    • Published: May. 08, 2023
    • Modified: May. 12, 2025

  • 5.4

    MEDIUM
    CVE-2023-1651

    The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any authenticated users, such as subscriber to update them. Furthermore, due to the lack of escaping o... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.10
    • Published: May. 08, 2023
    • Modified: May. 12, 2025

  • 4.8

    MEDIUM
    CVE-2023-3175

    The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.12
    • Published: Jul. 10, 2023
    • Modified: May. 12, 2025

  • 4.8

    MEDIUM
    CVE-2023-4253

    The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.08
    • Published: Sep. 04, 2023
    • Modified: May. 12, 2025

  • 6.1

    MEDIUM
    CVE-2023-1660

    The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing unauthenticated users to update some settings, leading to Stored XSS due to the lack of escaping when outputting them in the admin das... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.38
    • Published: May. 08, 2023
    • Modified: May. 12, 2025

  • 4.8

    MEDIUM
    CVE-2023-2811

    The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when u... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.08
    • Published: Jun. 19, 2023
    • Modified: May. 12, 2025

  • 9.6

    CRITICAL
    CVE-2023-5212

    The AI ChatBot plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 4.8.9 as well as version 4.9.2. This makes it possible for authenticated attackers with subscriber privileges to delete arbitrary files on the s... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.31
    • Published: Oct. 19, 2023
    • Modified: May. 12, 2025

  • 9.8

    CRITICAL
    CVE-2023-5204

    The ChatBot plugin for WordPress is vulnerable to SQL Injection via the $strid parameter in versions up to, and including, 4.8.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Thi... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %39.47
    • Published: Oct. 19, 2023
    • Modified: May. 12, 2025

  • 5.4

    MEDIUM
    CVE-2023-5534

    The AI ChatBot plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.8.9 and 4.9.2. This is due to missing or incorrect nonce validation on the corresponding functions. This makes it possible for unauthentica... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.06
    • Published: Oct. 20, 2023
    • Modified: May. 12, 2025

  • 5.3

    MEDIUM
    CVE-2023-5254

    The ChatBot plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.8.9 via the qcld_wb_chatbot_check_user function. This can allow unauthenticated attackers to extract sensitive data including confirmation... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.50
    • Published: Oct. 19, 2023
    • Modified: May. 12, 2025

  • 4.8

    MEDIUM
    CVE-2023-4254

    The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.08
    • Published: Sep. 04, 2023
    • Modified: May. 12, 2025

  • 4.8

    MEDIUM
    CVE-2023-5606

    The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-l... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.10
    • Published: Nov. 02, 2023
    • Modified: May. 12, 2025

  • 5.9

    MEDIUM
    CVE-2022-47613

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions.... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.12
    • Published: Mar. 29, 2023
    • Modified: May. 12, 2025

  • 8.8

    HIGH
    CVE-2023-44993

    Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.7.8 versions.... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.07
    • Published: Oct. 09, 2023
    • Modified: May. 12, 2025

  • 4.8

    MEDIUM
    CVE-2023-2742

    The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %0.08
    • Published: Jun. 19, 2023
    • Modified: May. 12, 2025

  • 5.5

    MEDIUM
    CVE-2024-6669

    The AI ChatBot for WordPress – WPBot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.7 due to insufficient input sanitization and output escaping. This makes it possible for au... Read more

    Affected Products : ai_chatbot wpbot
    • Published: Jul. 17, 2024
    • Modified: May. 12, 2025

  • 9.6

    CRITICAL
    CVE-2023-5241

    The AI ChatBot for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.8.9 as well as 4.9.2 via the qcld_openai_upload_pagetraining_file function. This allows subscriber-level attackers to append "<?php" to any existing file... Read more

    Affected Products : ai_chatbot wpbot
    • EPSS Score: %2.45
    • Published: Oct. 19, 2023
    • Modified: May. 12, 2025
Showing 20 of 291756 Results