WPBot vulnerabilities
We track 1 vulnerability in WPBot products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest WPBot vulnerabilities
- 9.8 Critical severity
WPBot Pro Wordpress Chatbot: Unrestricted Upload of File with Dangerous Type
The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'qcld_wpcfb_file_upload' function in all versions up to, and including, 13.5.4. This makes it possible for unauthenticated a