WordPress security by component

AI ChatBot

Plugin description

AI ChatBot adds an interactive chatbot to WordPress sites for answering visitor questions and handling configured conversations.

AI ChatBot (wpbot) is a WordPress plugin with 19 published CVE records in this archive. The latest tracked vulnerability was published Sep 12, 2026; the highest published CVSS base score is 9.8.

Plugin slug: wpbot

Latest vulnerability

CVE-2026-87918: WPBot lets unauthenticated callers spend configured AI credits

WPBot before 8.5.7 exposes several AJAX actions that relay prompts to configured AI providers without authorization or nonce checks. An unauthenticated attacker can issue third-party API requests through the site and consume charges against its stored API keys. The authoritative export does not name the actions, prompt fields, providers, or rate limits.

PublishedSep 12, 2026

Known safe version8.5.7

Published vulnerabilities for wpbot
		Safe version
Sep 12, 2026	CVE-2026-87918 WPBot lets unauthenticated callers spend configured AI credits WPBot before 8.5.7 exposes several AJAX actions that relay prompts to configured AI providers without authorization or nonce checks. An unauthenticated attacker can issue third-party API requests through the site and consume charges against its stored API keys. The authoritative export does not name the actions, prompt fields, providers, or rate limits.	8.5.7	CVE5.3 NVDPending
Sep 12, 2026	CVE-2026-87916 WPBot exposes visitor contact details without authentication WPBot from 8.4.9 through versions before 8.6.0 lists stored chat sessions through an AJAX action with no capability or nonce check. An unauthenticated caller can request a broad date range and retrieve every chat visitor's name, email address, and phone number. The authoritative export does not identify the action or date parameters.	8.6.0	CVE5.3 NVDPending
Jul 27, 2026	CVE-2026-14189 WPBot administrator field identifiers permit SQL injection WPBot before 8.5.2 places administrator-configured field identifiers into a database query without safely constraining them. A malicious or compromised administrator can store an SQL expression in the configuration, which is executed when a visitor triggers the affected search flow and can expose or alter database content.	8.5.2	CVE3.8 NVDPending
Jul 21, 2026	CVE-2026-14185 WPBot: A security weakness WPBot is affected by a security weakness. Exploitation requires an authenticated subscriber account. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is < 8.2.0.	8.2.0	CVE4.3 NVDPending
Sep 09, 2025	CVE-2025-9111 AI ChatBot for WordPress: Cross-site scripting AI ChatBot for WordPress is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE3.5 NVDPending
May 15, 2025	CVE-2025-0329 AI ChatBot for WordPress: Cross-site scripting AI ChatBot for WordPress is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.8 NVDPending
Nov 02, 2023	CVE-2023-5606 Wpbot: Cross-site scripting Wpbot is affected by cross-site scripting. Exploitation requires an authenticated administrator account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.4 NVD4.8
Oct 20, 2023	CVE-2023-5534 AI ChatBot: Cross-site request forgery AI ChatBot is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVD5.4
Oct 20, 2023	CVE-2023-5533 AI ChatBot: A security weakness AI ChatBot is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVD9.8
Sep 04, 2023	CVE-2023-4254 AI ChatBot: Cross-site scripting AI ChatBot is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.8 NVD4.8
Sep 04, 2023	CVE-2023-4253 AI ChatBot: Cross-site scripting AI ChatBot is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.8 NVD4.8
Jul 10, 2023	CVE-2023-3175 AI ChatBot: Cross-site scripting AI ChatBot is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVEPending NVD4.8
Jun 19, 2023	CVE-2023-2811 AI ChatBot: Cross-site scripting AI ChatBot is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.8 NVD4.8
Jun 19, 2023	CVE-2023-2742 AI ChatBot: Cross-site scripting AI ChatBot is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.8 NVD4.8
May 08, 2023	CVE-2023-1660 AI ChatBot: Cross-site scripting AI ChatBot is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVD6.1
May 08, 2023	CVE-2023-1651 AI ChatBot: Cross-site scripting AI ChatBot is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE5.4 NVD5.4
May 08, 2023	CVE-2023-1650 AI ChatBot: Code execution AI ChatBot is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE9.8 NVD9.8
May 08, 2023	CVE-2023-1649 AI ChatBot: Cross-site scripting AI ChatBot is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.8 NVD4.8
May 08, 2023	CVE-2023-1011 AI ChatBot: Cross-site scripting AI ChatBot is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVD6.1

Data attribution: This product uses the NVD API but is not endorsed or certified by the NVD.

Vulnerability data licensing

CVE. Copyright © 1999–2026, The MITRE Corporation. MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

CWE. Copyright © 2006–2026, The MITRE Corporation. CWE™ is free to use by any organization or individual for any research, development, and/or commercial purposes, per these CWE Terms of Use. Accordingly, The MITRE Corporation hereby grants you a non-exclusive, royalty-free license to use CWE for research, development, and commercial purposes. Any copy you make for such purposes is authorized on the condition that you reproduce MITRE’s copyright designation and this license in any such copy.

CVSS. CVSS is owned and managed by FIRST.Org, Inc. (FIRST) and used by permission.

Source-record text is CVE/CNA content delivered through the NVD API. Fused summaries and remediation guidance are independently authored and are not attributed to NVD.

All other copyrights and trademarks are the property of their respective owners.

Full data sources, terms, and disclaimers