Ai Chatbot (Unknown) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-09-04. Vendor: Unknown.
CVEs of Ai Chatbot
- CVE-2023-4254 - CVSS 4.8 (medium), 2023-09-04: The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
- CVE-2023-4253 - CVSS 4.8 (medium), 2023-09-04: The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
- CVE-2023-3175 - CVSS 4.8 (medium), 2023-07-10: The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site…
- CVE-2023-2811 - CVSS 4.8 (medium), 2023-06-19: The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to…
- CVE-2023-2742 - CVSS 4.8 (medium), 2023-06-19: The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site…
- CVE-2023-1660 - CVSS 6.1 (medium), 2023-05-08: The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing unauthenticated users to update some…
- CVE-2023-1011 - CVSS 6.1 (medium), 2023-05-08: The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper…
- CVE-2023-1651 - CVSS 5.4 (medium), 2023-05-08: The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any…
- CVE-2023-1650 - CVSS 9.8 (critical), 2023-05-08: The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauthenticated users, which could allow…
- CVE-2023-1649 - CVSS 4.8 (medium), 2023-05-08: The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to…
