Wpbot

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Wpbot records in CISA KEV

No Wpbot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wpot 1 record MEDIUM

Records

1 record

TI-2024-12139 CVE-2024-13091 · GHSA-2w2m-pp4h-mfxr

WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File Upload

MEDIUM 50

The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'qcld_wpcfb_file_upload' function in all versions up to, and including, 13.5.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00853 Published 2025-01-21 No fix listed CWE-434

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0