GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content vulnerabilities

2 known vulnerabilities in GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content from Ahmadgb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  GeekyBot — AI Copilot, Chatbot, WooCommerce…: Missing Authorization

  CVE-2026-5294May 5, 2026Ahmadgb

  The Geeky Bot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.2.2. This is due to a nopriv AJAX route allowing attacker-controlled model/function dispatch and reaching a plugin installer helper that downloads and

• 7.5 High severity

  GeekyBot — AI Copilot, Chatbot, WooCommerce…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-3456May 5, 2026Ahmadgb

  The GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation plugin for WordPress is vulnerable to SQL Injection via the 'attributekey' parameter in versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parame