Wpbot (Quantumcloud) - vulnerabilities (CVEs)

27 CVEs, 0 in the last 30 days, 593 known versions, newest CVE from 2025-09-09. Vendor: Quantumcloud.

CVEs of Wpbot

CVE-2025-9111 - CVSS 3.5 (low), 2025-09-09: The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2025-0329 - CVSS 4.8 (medium), 2025-05-15: The AI ChatBot for WordPress WordPress plugin before 6.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2024-6669 - CVSS 5.5 (medium), 2024-07-17: The AI ChatBot for WordPress – WPBot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and…
CVE-2024-0451 - CVSS 5 (medium), 2024-05-22: The AI ChatBot plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the openai_file_list_callback function…
CVE-2024-0453 - CVSS 7.7 (high), 2024-05-22: The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_delete_callback…
CVE-2024-0452 - CVSS 7.7 (high), 2024-05-22: The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_upload_callback…
CVE-2024-22309 - CVSS 9.8 (critical), 2024-01-24: Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0.
CVE-2023-48741 - CVSS 7.6 (high), 2023-12-19: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud AI ChatBot.This issue affects AI ChatBot:…
CVE-2023-5606 - CVSS 4.8 (medium), 2023-11-02: The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficient input…
CVE-2023-5534 - CVSS 5.4 (medium), 2023-10-20: The AI ChatBot plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.8.9 and 4.9.2. This is due to missing or…
CVE-2023-5533 - CVSS 9.8 (critical), 2023-10-20: The AI ChatBot plugin for WordPress is vulnerable to unauthorized use of AJAX actions due to missing capability checks on the corresponding functions in…
CVE-2023-5254 - CVSS 5.3 (medium), 2023-10-19: The ChatBot plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.8.9 via the qcld_wb_chatbot_check_user…
CVE-2023-5241 - CVSS 9.6 (critical), 2023-10-19: The AI ChatBot for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.8.9 as well as 4.9.2 via the…
CVE-2023-5212 - CVSS 9.6 (critical), 2023-10-19: The AI ChatBot plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 4.8.9 as well as version 4.9.2. This makes it…
CVE-2023-5204 - CVSS 9.8 (critical), 2023-10-19: The ChatBot plugin for WordPress is vulnerable to SQL Injection via the $strid parameter in versions up to, and including, 4.8.9 due to insufficient escaping…
CVE-2023-44993 - CVSS 8.8 (high), 2023-10-09: Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.7.8 versions.
CVE-2023-4254 - CVSS 4.8 (medium), 2023-09-04: The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
CVE-2023-4253 - CVSS 4.8 (medium), 2023-09-04: The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
CVE-2023-3175 - CVSS 4.8 (medium), 2023-07-10: The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site…
CVE-2023-2811 - CVSS 4.8 (medium), 2023-06-19: The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to…
CVE-2023-2742 - CVSS 4.8 (medium), 2023-06-19: The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site…
CVE-2023-1660 - CVSS 6.1 (medium), 2023-05-08: The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing unauthenticated users to update some…
CVE-2023-1011 - CVSS 6.1 (medium), 2023-05-08: The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper…
CVE-2023-1651 - CVSS 5.4 (medium), 2023-05-08: The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any…
CVE-2023-1650 - CVSS 9.8 (critical), 2023-05-08: The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauthenticated users, which could allow…
CVE-2023-1649 - CVSS 4.8 (medium), 2023-05-08: The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to…
CVE-2022-47613 - CVSS 5.9 (medium), 2023-03-29: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions.