Quantumcloud Chatbot vulnerabilities

• quantumcloud ai chatbot for woocommerce – woowbot AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action CVE-2026-111372 4.3 MediumOctober 28, 2026
• chatbot for wordpress - wpbot conversational forms for chatbot WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability CVE-2026-110886 9.8 CriticalOctober 18, 2026
• chatbot for wordpress - wpbot conversational forms for chatbot WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability CVE-2026-95531 8.8 HighSeptember 30, 2026
• quantumcloud wpbot – ai chatbot for live support, lead generation, ai services WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter CVE-2026-83593 7.2 HighSeptember 9, 2026
• quantumcloud wpbot – ai chatbot for live support, lead generation, ai services WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action CVE-2026-16773 5.3 MediumJuly 28, 2026
• quantumcloud wpbot – ai chatbot for live support, lead generation, ai services WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action CVE-2026-16774 5.3 MediumJuly 28, 2026
• quantumcloud wpbot – ai chatbot for live support, lead generation, ai services WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function CVE-2026-15610 4.3 MediumJuly 16, 2026
• quantumcloud wpbot – ai chatbot for live support, lead generation, ai services WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter CVE-2026-15106 5.3 MediumJuly 16, 2026
• quantumcloud chatbot for ecommerce &#8211; woowbot WordPress ChatBot for eCommerce – WoowBot plugin <= 4.6.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-57414 6.5 MediumJuly 13, 2026
• quantumcloud chatbot WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-57363 7.1 HighJuly 13, 2026
• quantumcloud chatbot WordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-57362 7.1 HighJuly 2, 2026
• quantumcloud wpbot – ai chatbot for live support, lead generation, ai services WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter CVE-2026-13731 7.2 HighJuly 1, 2026
• chatbot for wordpress - wpbot conversational forms for chatbot WordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerability CVE-2024-32729 7.5 HighJune 17, 2026
• quantumcloud wpbot pro wordpress chatbot WordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerability CVE-2025-60223 7.7 HighJune 17, 2026
• quantumcloud chatbot WordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerability CVE-2026-40788 7.1 HighJune 15, 2026
• quantumcloud chatbot WordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerability CVE-2026-32499 9.3 CriticalMarch 25, 2026
• quantumcloud chatbot WordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerability CVE-2025-64277 5.3 MediumNovember 13, 2025
• quantumcloud chatbot WordPress ChatBot plugin <= 7.7.3 - Broken Access Control vulnerability CVE-2025-62952 4.3 MediumOctober 27, 2025
• oct8ne chatbot Stored Cross-Site Scripting (XSS) in Oct8ne Chatbot CVE-2025-11952 5.3 MediumOctober 22, 2025
• oct8ne chatbot Stored Cross-Site Scripting (XSS) in Oct8ne Chatbot CVE-2025-10869 5.3 MediumOctober 15, 2025
• quantumcloud chatbot WordPress ChatBot plugin <= 6.7.3 - Broken Access Control Vulnerability CVE-2025-53200 4.3 MediumJune 27, 2025
• quantumcloud wpbot pro wordpress chatbot WordPress WPBot Pro Wordpress Chatbot <= 12.7.0 - PHP Object Injection Vulnerability CVE-2025-47582 9.8 CriticalMay 19, 2025
• quantumcloud wpbot pro wordpress chatbot WPBot Pro Wordpress Chatbot <= 13.6.2 - Authenticated (Subscriber+) Arbitrary File Deletion CVE-2025-3812 8.1 HighMay 17, 2025
• quantumcloud chatbot WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerability CVE-2025-26932 7.5 HighFebruary 25, 2025
• quantumcloud wpbot pro wordpress chatbot, wpot +1 more WPBot Pro Wordpress Chatbot <= 13.5.5 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response Creation CVE-2024-12879 4.3 MediumJanuary 22, 2025
• quantumcloud wpbot pro wordpress chatbot, wpbot wpot +1 more WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload CVE-2024-13091 9.8 CriticalJanuary 21, 2025
• chatbot for wordpress - wpbot conversational forms for chatbot WordPress ChatBot Conversational Forms plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-22813 6.5 MediumJanuary 9, 2025
• quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 more AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-6669 5.5 MediumJuly 17, 2024
• quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 more AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback CVE-2024-0453 5.0 MediumMay 22, 2024
• quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 more AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback CVE-2024-0452 5.0 MediumMay 22, 2024
• quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 more AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback CVE-2024-0451 5.0 MediumMay 22, 2024
• chatbot for wordpress - wpbot conversational forms for chatbot WordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-34380 5.9 MediumMay 6, 2024
• quantumcloud chatbot with ai, wpbot +1 more WordPress ChatBot Plugin <= 5.1.0 is vulnerable to PHP Object Injection CVE-2024-22309 8.7 HighJanuary 24, 2024
• quantumcloud ai chatbot, wpbot +1 more WordPress ChatBot Plugin <= 4.7.8 is vulnerable to SQL Injection CVE-2023-48741 7.6 HighDecember 19, 2023
• quantumcloud ai chatbot, wpbot +1 more The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in... CVE-2023-5606 4.4 MediumNovember 2, 2023
• quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 more AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions CVE-2023-5533 5.3 MediumOctober 20, 2023
• quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 more AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions CVE-2023-5534 4.3 MediumOctober 20, 2023
• quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 more AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user CVE-2023-5254 5.3 MediumOctober 19, 2023
• quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 more AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file CVE-2023-5212 9.6 CriticalOctober 19, 2023
• quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 more AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response CVE-2023-5204 Public exploit 9.8 CriticalOctober 19, 2023
• quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 more AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file CVE-2023-5241 9.6 CriticalOctober 19, 2023
• quantumcloud ai chatbot, wpbot +1 more WordPress ChatBot Plugin <= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-44993 4.3 MediumOctober 9, 2023
• quantumcloud ai chatbot, wpbot +1 more Chatbot < 4.7.8 - Admin+ Stored XSS in FAQ Builder CVE-2023-4253 4.8 MediumSeptember 4, 2023
• quantumcloud ai chatbot, wpbot +1 more Chatbot < 4.7.8 - Admin+ Stored XSS in Language Settings CVE-2023-4254 4.8 MediumSeptember 4, 2023
• quantumcloud ai chatbot, wpbot +1 more AI ChatBot < 4.6.1 - Admin+ Stored Cross-Site Scripting CVE-2023-3175 4.8 MediumJuly 10, 2023
• quantumcloud ai chatbot, wpbot +1 more AI ChatBot < 4.5.5 - Admin+ Stored Cross-Site Scripting CVE-2023-2742 4.8 MediumJune 19, 2023
• quantumcloud ai chatbot, wpbot +1 more AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting CVE-2023-2811 4.8 MediumJune 19, 2023
• cbot core, panel, chatbot +2 more User Authentication Bypass in CBOT's Chatbot CVE-2023-2887 9.8 CriticalMay 25, 2023
• cbot core, panel, chatbot +2 more Cross-Site WebSocket Hijacking in CBOT's Chatbot CVE-2023-2886 4.3 MediumMay 25, 2023
• cbot core, panel, chatbot +2 more Channel Accessible by Non-Endpoint in CBOT's Chatbot CVE-2023-2885 8.1 HighMay 25, 2023
• Show olderLoading…