WPBot Pro Wordpress Chatbot vulnerabilities
3 known vulnerabilities in WPBot Pro Wordpress Chatbot from QuantumCloud. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
WPBot Pro Wordpress Chatbot: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in QuantumCloud WPBot Pro Wordpress Chatbot allows Object Injection.This issue affects WPBot Pro Wordpress Chatbot: from n/a through 12.7.0.
- 8.1 High severity
WPBot Pro Wordpress Chatbot: External Control of File Name or Path
The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the qcld_openai_delete_training_file() function in all versions up to, and including, 13.6.2. This makes it possible for a
- 9.8 Critical severity
WPBot Pro Wordpress Chatbot: Unrestricted Upload of File with Dangerous Type
The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'qcld_wpcfb_file_upload' function in all versions up to, and including, 13.5.4. This makes it possible for unauthenticated a