Wpbot – ai chatbot for live support, lead generation, ai services

This hub aggregates every CVE we track for Wpbot – ai chatbot for live support, lead generation, ai services, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Wpbot – ai chatbot for live support, lead generation, ai services.

• CVE-2026-16773WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action5.3Jul 28, 2026
• CVE-2026-16774WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action5.3Jul 28, 2026
• CVE-2026-15610WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function4.3Jul 16, 2026
• CVE-2026-15106WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter5.3Jul 16, 2026
• CVE-2026-13731WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter7.2Jul 1, 2026
• CVE-2024-6669AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5Jul 17, 2024
• CVE-2024-0453AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback5.0May 22, 2024
• CVE-2024-0452AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback5.0May 22, 2024
• CVE-2024-0451AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback5.0May 22, 2024
• CVE-2023-5533AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions5.3Oct 20, 2023
• CVE-2023-5534AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions4.3Oct 20, 2023
• CVE-2023-5254AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user5.3Oct 19, 2023
• CVE-2023-5212AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file9.6Oct 19, 2023
• CVE-2023-5204AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response9.8Oct 19, 2023
• CVE-2023-5241AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file9.6Oct 19, 2023