Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: artibot Clear all filters
TI-2025-11075 CVE-2025-12078 · GHSA-hrm6-3q32-jhwc

ArtiBot Free Chat Bot for WebSites <= 1.1.7 - Reflected Cross-Site Scripting via PostMessage

Priority LOW 27

The ArtiBot Free Chat Bot for WebSites plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0022 Published 2025-11-18 No fix listed CWE-79
TI-2024-00408 CVE-2024-0447 · GHSA-65j2-v64r-f5cv

ArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Missing Authorization to Settings Update

Priority LOW 24

The ArtiBot Free Chat Bot for WordPress WebSites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the artibot_update function in all versions up to, and includi…

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.0058 Published 2024-03-13 No fix listed CWE-862
TI-2024-00410 CVE-2024-0449 · GHSA-r537-7qm5-gx44

ArtiBot Free Chat Bot for WordPress WebSites <= 1.1.6 - Authenticated (Admin+) Cross-Site Scripting

Priority LOW 23

The ArtiBot Free Chat Bot for WordPress WebSites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.6 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00525 Published 2024-03-13 No fix listed CWE-79