Read the docs
TI-2023-01553 Aliases CVE-2023-1651GHSA-3fx8-h7hv-rjf7

ChatBot < 4.4.9 - Subscriber+ OpenAI Settings Update to Stored XSS

Priority MEDIUM 58Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any authenticated users, such as subscriber to update them. Furthermore, due to the lack of escaping of the settings, this could also lead to Stored XSS

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00242 15th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix Fixed AI ChatBot (Unknown): 4.4.9

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
UnknownAI ChatBotbefore 4.4.94.4.9Patch availableCNA
  • AI ChatBot VendorUnknown Affected before 4.4.9 Fixed in 4.4.9 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:quantumcloud:wpbot:*:*:*:*:*:wordpress:*:*before 4.4.9Vulnerablequantumcloud
  • cpe:2.3:a:quantumcloud:wpbot:*:*:*:*:*:wordpress:*:* Versions before 4.4.9 Vulnerable ·quantumcloud

Remediation

  • Fix · CNA AI ChatBot (Unknown) Fixed in 4.4.9

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    AI ChatBot 4.4.9

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2023-01558 ChatBot < 4.4.9 - Unauthenticated Stored XSSPriority MEDIUM 60
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-1651
  2. 2026-10-03 Alias added: GHSA-3fx8-h7hv-rjf7

References

Exploit 1

  • TI-2023-01552 ChatBot < 4.4.7 - Unauthenticated PHP Object Injection CVSS 3.1CRITICAL 9.8
  • TI-2023-01558 ChatBot < 4.4.9 - Unauthenticated Stored XSS CVSS 3.1MEDIUM 6.1
  • TI-2023-00958 ChatBot < 4.4.5 - Stored XSS via CSRF CVSS 3.1MEDIUM 6.1
  • TI-2025-00264 AI ChatBot for WordPress – WPBot < 6.2.4 - Admin+ Stored XSS CVSS 3.1MEDIUM 4.8
  • TI-2023-03940 Chatbot < 4.7.8 - Admin+ Stored XSS in Language Settings CVSS 3.1MEDIUM 4.8
  • TI-2023-03939 Chatbot < 4.7.8 - Admin+ Stored XSS in FAQ Builder CVSS 3.1MEDIUM 4.8
See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences