Read the docs

cliengo

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

cliengo records in CISA KEV

No cliengo vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2024-05553 CVE-2024-5992 · GHSA-phcx-r5fx-mpr6

Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Unauthenticated Chatbot Settings Update

Priority LOW 36

The Cliengo – Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_chatbot_token' and 'update_chatbot_position' functions in all versions up to,…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00536 Published 2024-07-09 No fix listed CWE-862
TI-2025-42831 CVE-2025-69388 · GHSA-3r56-xx7r-cr9c

WordPress Cliengo – Chatbot plugin <= 3.0.4 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in cliengo Cliengo – Chatbot cliengo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cliengo – Chatbot: from n/a through <= 3.0.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00288 Published 2026-02-20 No fix listed CWE-862
TI-2024-05554 CVE-2024-5993 · GHSA-8g56-r329-q772

Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Authorized (Subscriber+) Chatbot Settings Update

Priority LOW 25

The Cliengo – Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_session' function in all versions up to, and including, 3.0.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00461 Published 2024-07-09 No fix listed CWE-862
Open these records in search →