wpbot wpot vulnerabilities (CVE)

CVE records published for wpbot wpot, newest first. Follow to get an email when a new one appears.

1 results

9.8Critical

CVE-2024-13091 1 year ago

WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload

QuantumCloud WPBot Pro Wordpress Chatbot

The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'qcld_wpcfb_file_upload' function in all versions up to, and including, 13.5.4. This makes it possible for unauthenticated …