TI-2023-04796 Aliases CVE-2023-5212 GHSA-phr8-8r83-j89w

AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file

MEDIUM 45CWE-22Published 2023-10-19 · Updated 2026-04-08

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

The AI ChatBot plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 4.8.9 as well as version 4.9.2. This makes it possible for authenticated attackers with subscriber privileges to delete arbitrary files on the server, which makes it possible to take over affected sites as well as others sharing the same hosting account. Version 4.9.1 originally addressed the issue, but it was reintroduced in 4.9.2 and fixed again in 4.9.3.

Why it matters now

EPSS 0.01982 80th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
quantumcloud	WPBot – AI ChatBot for Live Support, Lead Generation, AI Services	up to 4.8.9; 4.9.2	—	No fix listed	CNA

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Vendorquantumcloud Affected up to 4.8.9; 4.9.2 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:quantumcloud:wpbot::::::wordpress::*	before 4.9.1	Vulnerable	quantumcloud
cpe:2.3:a:quantumcloud:wpbot:4.9.2:::::wordpress::	4.9.2	Vulnerable	quantumcloud

cpe:2.3:a:quantumcloud:wpbot:*:*:*:*:*:wordpress:*:* Versions before 4.9.1 Vulnerable ·quantumcloud
cpe:2.3:a:quantumcloud:wpbot:4.9.2:*:*:*:*:wordpress:*:* Versions 4.9.2 Vulnerable ·quantumcloud

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-5212
2026-10-03 Alias added: GHSA-phr8-8r83-j89w

References

Patch 1

https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2977505%40chatbot%2Ftrunk&old=2967435%40chatbot%2Ftrunk&sfp_email=&sfph_mail=

Advisory 2

Other 1

https://plugins.trac.wordpress.org/browser/chatbot/trunk/includes/openai/qcld-bot-openai.php?rev=2957286#L576

TI-2023-01552 ChatBot < 4.4.7 - Unauthenticated PHP Object Injection CVSS 3.1CRITICAL 9.8
TI-2023-01558 ChatBot < 4.4.9 - Unauthenticated Stored XSS CVSS 3.1MEDIUM 6.1
TI-2023-00958 ChatBot < 4.4.5 - Stored XSS via CSRF CVSS 3.1MEDIUM 6.1
TI-2023-01553 ChatBot < 4.4.9 - Subscriber+ OpenAI Settings Update to Stored XSS CVSS 3.1MEDIUM 5.4
TI-2025-00264 AI ChatBot for WordPress – WPBot < 6.2.4 - Admin+ Stored XSS CVSS 3.1MEDIUM 4.8
TI-2023-03940 Chatbot < 4.7.8 - Admin+ Stored XSS in Language Settings CVSS 3.1MEDIUM 4.8

See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences