Geeky Bot vulnerabilities
We track 1 vulnerability in Geeky Bot products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Geeky Bot vulnerabilities
- 7.5 High severity
Geeky Bot: Exposure of Sensitive Information to an Unauthorized Actor
The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to retrieve chat-history session metadata including WordPress usernames, user IDs, and timestamps.