CVE-2026-83593WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 09/09/2026 Severity High CVE-2026-17582Slider Hero with Video Background, Animation <= 9.1.7 - Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate) Exploitation status Not known exploited Fix Affected product S Slider Hero with Video Background, Animation Published 08/16/2026 Severity Medium CVE-2026-16773WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 07/28/2026 Severity Medium CVE-2026-16774WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 07/28/2026 Severity Medium CVE-2026-61953WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability Exploitation status Not known exploited Fix Affected product S Simple Link Directory Pro Published 07/27/2026 Severity High CVE-2026-61981WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product S Simple Link Directory Pro Published 07/23/2026 Severity Medium CVE-2026-15610WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 07/16/2026 Severity Medium CVE-2026-15106WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 07/16/2026 Severity Medium CVE-2026-57710WordPress WoowBot Pro Max plugin <= 14.1.7 - Arbitrary File Upload vulnerability Exploitation status Not known exploited Fix Affected product W WoowBot Pro Max Published 07/13/2026 Severity Critical CVE-2026-57707WordPress Simple Business Directory Pro plugin <= 15.9.4 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product S Simple Business Directory Pro Published 07/13/2026 Severity Critical CVE-2026-57414WordPress ChatBot for eCommerce – WoowBot plugin <= 4.6.1 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product C ChatBot for eCommerce – WoowBot Published 07/13/2026 Severity Medium CVE-2026-57363WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product C ChatBot Published 07/13/2026 Severity High CVE-2026-57682WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product S Simple Link Directory Published 07/02/2026 Severity High CVE-2026-57362WordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product C ChatBot Published 07/02/2026 Severity High CVE-2026-13731WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 07/01/2026 Severity High CVE-2024-32729WordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerability Exploitation status Not known exploited Fix Affected product C Conversational Forms for ChatBot Published 06/17/2026 Severity High CVE-2025-60223WordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerability Exploitation status Not known exploited Fix Affected product W WPBot Pro Wordpress Chatbot Published 06/17/2026 Severity High CVE-2026-40788WordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product C ChatBot Published 06/15/2026 Severity High CVE-2026-53742Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributes Exploitation status Not known exploited Fix Not confirmed Affected product S Simple Link Directory Published 06/10/2026 Severity Medium CVE-2026-53741Simple Link Directory through 9.0.4 Stored XSS via sld_no_results_found Option Exploitation status Not known exploited Fix Not confirmed Affected product S Simple Link Directory Published 06/10/2026 Severity Medium CVE-2026-7209Simple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Exploitation status Not known exploited Fix Affected product S Simple Link Directory Published 05/02/2026 Severity Medium CVE-2026-32499WordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product C ChatBot Published 03/25/2026 Severity Critical CVE-2025-67576WordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product S Simple Link Directory Published 12/09/2025 Severity Medium CVE-2025-67465WordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product S Simple Link Directory Published 12/09/2025 Severity Medium CVE-2025-64277WordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product C ChatBot Published 11/13/2025 Severity Medium CVE-2025-62952WordPress ChatBot plugin <= 7.7.3 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product C ChatBot Published 10/27/2025 Severity Medium CVE-2025-60232WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix Affected product K KBx Pro Ultimate Published 10/22/2025 Severity Critical CVE-2025-49901WordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerability Exploitation status Not known exploited Fix Affected product S Simple Link Directory Published 10/22/2025 Severity Critical CVE-2025-9111WPBOT < 7.1.0 - Admin+ Stored XSS Exploitation status Public exploit Fix Affected product A AI ChatBot for WordPress Published 09/09/2025 Severity Low CVE-2025-48162WordPress Simple Business Directory Pro <= 15.5.1 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product S Simple Business Directory Pro Published 08/20/2025 Severity High CVE-2025-48297WordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product S Simple Link Directory Published 08/20/2025 Severity High CVE-2025-53580WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerability Exploitation status Not known exploited Fix Affected product S Simple Business Directory Pro Published 08/20/2025 Severity Critical CVE-2025-32297WordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection Vulnerability Exploitation status Not known exploited Fix Affected product S Simple Link Directory Published 07/04/2025 Severity High CVE-2025-53200WordPress ChatBot plugin <= 6.7.3 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product C ChatBot Published 06/27/2025 Severity Medium CVE-2025-31053WordPress KBx Pro Ultimate plugin < 8.0.5 - Arbitrary File Deletion Vulnerability Exploitation status Not known exploited Fix Affected product K KBx Pro Ultimate Published 05/23/2025 Severity High CVE-2025-31918WordPress Simple Business Directory Pro plugin < 15.6.9 - Privilege Escalation vulnerability Exploitation status Not known exploited Fix Affected product S Simple Business Directory Pro Published 05/23/2025 Severity Critical CVE-2025-47582WordPress WPBot Pro Wordpress Chatbot <= 12.7.0 - PHP Object Injection Vulnerability Exploitation status Not known exploited Fix Affected product W WPBot Pro Wordpress Chatbot Published 05/19/2025 Severity Critical CVE-2025-3812WPBot Pro Wordpress Chatbot <= 13.6.2 - Authenticated (Subscriber+) Arbitrary File Deletion Exploitation status Not known exploited Fix Affected product W WPBot Pro Wordpress Chatbot Published 05/17/2025 Severity High CVE-2025-32296WordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product S Simple Link Directory Published 05/16/2025 Severity Medium CVE-2025-0329AI ChatBot for WordPress – WPBot < 6.2.4 - Admin+ Stored XSS Exploitation status Public exploit Fix Affected product A AI ChatBot for WordPress Published 05/15/2025 Severity Medium CVE-2024-6809Simple Video Directory < 1.4.3 - Unauthenticated SQLi Exploitation status Public exploit Fix Affected product S Simple Video Directory Published 05/15/2025 Severity Critical CVE-2025-32244WordPress SEO Help plugin <= 6.7.9 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product S SEO Help Published 04/10/2025 Severity Medium CVE-2025-32675WordPress SEO Help plugin <= 6.7.9 - Server Side Request Forgery (SSRF) vulnerability Exploitation status Not known exploited Fix Affected product S SEO Help Published 04/09/2025 Severity Medium CVE-2025-26932WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product C ChatBot Published 02/25/2025 Severity High CVE-2024-12415AI Infographic Maker <= 4.9.0 - Unauthenticated Arbitrary Shortcode Execution Exploitation status Not known exploited Fix Affected product A AI Infographic Maker Published 01/31/2025 Severity Medium CVE-2024-12879WPBot Pro Wordpress Chatbot <= 13.5.5 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response Creation Exploitation status Not known exploited Fix Affected product W WPBot Pro Wordpress Chatbot Published 01/22/2025 Severity Medium CVE-2024-13091WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload Exploitation status Not known exploited Fix Affected product W WPBot Pro Wordpress Chatbot Published 01/21/2025 Severity Critical CVE-2025-22813WordPress ChatBot Conversational Forms plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product C Conversational Forms for ChatBot Published 01/09/2025 Severity Medium CVE-2024-56297WordPress Highlight plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product H Highlight Published 01/07/2025 Severity Medium CVE-2024-56238WordPress Floating Action Buttons plugin <= 0.9.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product F Floating Action Buttons Published 01/02/2025 Severity Medium CVE-2024-12417Simple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode Execution Exploitation status Not known exploited Fix Affected product S Simple Link Directory Published 12/13/2024 Severity Medium CVE-2024-12156AI Content Writer, RSS Feed to Post, Autoblogging SEO Help <= 6.1.3 - Reflected Cross-Site Scripting Exploitation status Not known exploited Fix Affected product Q QC SEO Help for llms.txt, AI Analytics, AI Content Writer, Subtitle to Article Published 12/12/2024 Severity Medium CVE-2024-11928iChart – Easy Charts and Graphs <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter Exploitation status Not known exploited Fix Affected product I iChart – Easy Charts and Graphs Published 12/10/2024 Severity Medium CVE-2024-52395WordPress Floating Buttons for WooCommerce plugin <= 2.8.8 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product F Floating Buttons for WooCommerce Published 11/19/2024 Severity Medium CVE-2024-6669AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 07/17/2024 Severity Medium CVE-2024-5811Simple Video Directory < 1.4.4 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product S Simple Video Directory Published 07/12/2024 Severity Medium CVE-2024-5858Infographic Maker iList <= 4.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Title Update Exploitation status Not known exploited Fix Affected product A AI Infographic Maker Published 06/15/2024 Severity Medium CVE-2024-0453AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 05/22/2024 Severity Medium CVE-2024-0452AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 05/22/2024 Severity Medium CVE-2024-0451AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 05/22/2024 Severity Medium CVE-2024-34380WordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product C Conversational Forms for ChatBot Published 05/06/2024 Severity Medium CVE-2024-32696WordPress AI Infographic Maker OpenAI plugin <= 4.6.6 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product I Infographic Maker – iList Published 04/22/2024 Severity Medium CVE-2024-22309WordPress ChatBot Plugin <= 5.1.0 is vulnerable to PHP Object Injection Exploitation status Not known exploited Fix Affected product C ChatBot with AI Published 01/24/2024 Severity High CVE-2023-48741WordPress ChatBot Plugin <= 4.7.8 is vulnerable to SQL Injection Exploitation status Not confirmed Fix Affected product A AI ChatBot Published 12/19/2023 Severity High CVE-2023-5606Exploitation status Not known exploited Fix Affected product A AI ChatBot Published 11/02/2023 Severity Medium CVE-2023-5533AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 10/20/2023 Severity Medium CVE-2023-5534AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 10/20/2023 Severity Medium CVE-2023-5254AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 10/19/2023 Severity Medium CVE-2023-5212AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file Exploitation status Not confirmed Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 10/19/2023 Severity Critical CVE-2023-5204AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response Exploitation status Not confirmed Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 10/19/2023 Severity Critical CVE-2023-5241AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file Exploitation status Not known exploited Fix Affected product W WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Published 10/19/2023 Severity Critical CVE-2023-44993WordPress ChatBot Plugin <= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product A AI ChatBot Published 10/09/2023 Severity Medium CVE-2023-4253Chatbot < 4.7.8 - Admin+ Stored XSS in FAQ Builder Exploitation status Public exploit Fix Affected product A AI ChatBot Published 09/04/2023 Severity Medium CVE-2023-4254Chatbot < 4.7.8 - Admin+ Stored XSS in Language Settings Exploitation status Public exploit Fix Affected product A AI ChatBot Published 09/04/2023 Severity Medium CVE-2021-4424Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypass Exploitation status Not known exploited Fix Affected product S Slider Hero with Video Background, Animation Published 07/12/2023 Severity Medium CVE-2023-3175AI ChatBot < 4.6.1 - Admin+ Stored Cross-Site Scripting Exploitation status Public exploit Fix Affected product A AI ChatBot Published 07/10/2023 Severity Unknown CVE-2023-2742AI ChatBot < 4.5.5 - Admin+ Stored Cross-Site Scripting Exploitation status Public exploit Fix Affected product A AI ChatBot Published 06/19/2023 Severity Medium CVE-2023-2811AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting Exploitation status Public exploit Fix Affected product A AI ChatBot Published 06/19/2023 Severity Medium CVE-2023-1649ChatBot < 4.5.1 - Admin+ Stored XSS Exploitation status Public exploit Fix Affected product A AI ChatBot Published 05/08/2023 Severity Medium CVE-2023-1650ChatBot < 4.4.7 - Unauthenticated PHP Object Injection Exploitation status Public exploit Fix Affected product A AI ChatBot Published 05/08/2023 Severity Critical CVE-2023-1651ChatBot < 4.4.9 - Subscriber+ OpenAI Settings Update to Stored XSS Exploitation status Public exploit Fix Affected product A AI ChatBot Published 05/08/2023 Severity Medium CVE-2023-1011ChatBot < 4.4.5 - Stored XSS via CSRF Exploitation status Public exploit Fix Affected product A AI ChatBot Published 05/08/2023 Severity Medium CVE-2023-1660ChatBot < 4.4.9 - Unauthenticated Stored XSS Exploitation status Public exploit Fix Affected product A AI ChatBot Published 05/08/2023 Severity Medium CVE-2023-23981WordPress Conversational Forms for ChatBot Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product C Conversational Forms for ChatBot Published 04/06/2023 Severity Medium CVE-2022-47613WordPress AI ChatBot Plugin <= 4.3.0 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product A AI ChatBot Published 03/29/2023 Severity Medium CVE-2023-24415WordPress AI ChatBot plugin <= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not confirmed Fix Affected product A AI ChatBot Published 02/23/2023 Severity Medium CVE-2022-3074Slider Hero < 8.4.4 - Admin+ Stored Cross-Site Scripting Exploitation status Public exploit Fix Affected product S Slider Hero with Animation, Video Background Published 09/26/2022 Severity Medium CVE-2022-0760Simple Link Directory < 7.7.2 - Unauthenticated SQL injection Exploitation status Not confirmed Fix Affected product S Simple Link Directory Published 03/21/2022 Severity Unknown CVE-2022-0747Infographic Maker - iList < 4.3.8 - Unauthenticated SQL Injection Exploitation status Not confirmed Fix Affected product I Infographic Maker – iList Published 03/21/2022 Severity Unknown CVE-2021-24725Comment Link Remove and Other Comment Tools < 2.1.6 - Arbitrary Comment Deletion via CSRF Exploitation status Not confirmed Fix Affected product C Comment Link Remove and Other Comment Tools Published 09/13/2021 Severity Unknown CVE-2021-24506Slider Hero < 8.2.7 - Contributor+ SQL Injection Exploitation status Not confirmed Fix Affected product S Slider Hero with Animation, Video Background & Intro Maker Published 08/23/2021 Severity Unknown CVE-2019-13463Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 03/20/2020 Severity Unknown 
