5.3
Moyenne
CVE-2026-16773 The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Sensitive…
Description
The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.5.9 via the wpbot_send_email_transcript_free. This makes it possible for unauthenticated attackers to exfiltrate full chat transcripts and associated user PII — including names, email addresses, and phone numbers — stored in the wpbot_user and wpbot_conversation tables to an attacker-controlled email address.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WPBot – AI ChatBot for Live Support, Lead Generation, AI Services 8.5 | premières → 8.5.9 | Pas de correctif indiqué |
Autres CVE de WPBot – AI ChatBot for Live Support, Lead Generation, AI Services
Les 16 CVE de WPBot – AI ChatBot for Live Support, Lead Generation, AI Services →
CVE-2026-83593
The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored…
7.2
Élevée
CVE-2026-16774
The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.5.9 via…
5.3
Moyenne
CVE-2026-15106
The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to…
5.3
Moyenne
CVE-2026-15610
The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to…
4.3
Moyenne