Skip to content
Sign in
5.3 Medium

CVE-2026-16773 The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Sensitive…

Description

The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.5.9 via the wpbot_send_email_transcript_free. This makes it possible for unauthenticated attackers to exfiltrate full chat transcripts and associated user PII — including names, email addresses, and phone numbers — stored in the wpbot_user and wpbot_conversation tables to an attacker-controlled email address.

Affected products and versions

Product Affected versions Fixed in
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services 8.5 earliest → 8.5.9 No fix stated

Other CVEs of WPBot – AI ChatBot for Live Support, Lead Generation, AI Services

The 16 CVEs of WPBot – AI ChatBot for Live Support, Lead Generation, AI Services →
CVE-2026-83593 The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored… 7.2 High CVE-2026-16774 The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.5.9 via… 5.3 Medium CVE-2026-15106 The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to… 5.3 Medium CVE-2026-15610 The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to… 4.3 Medium
Track this CVE