Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: cliengo Clear all filters
TI-2025-42831 CVE-2025-69388 · GHSA-3r56-xx7r-cr9c

WordPress Cliengo – Chatbot plugin <= 3.0.4 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in cliengo Cliengo – Chatbot cliengo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cliengo – Chatbot: from n/a through <= 3.0.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00288 Published 2026-02-20 No fix listed CWE-862
TI-2024-05553 CVE-2024-5992 · GHSA-phcx-r5fx-mpr6

Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Unauthenticated Chatbot Settings Update

Priority LOW 36

The Cliengo – Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_chatbot_token' and 'update_chatbot_position' functions in all versions up to,…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00536 Published 2024-07-09 No fix listed CWE-862
TI-2024-05554 CVE-2024-5993 · GHSA-8g56-r329-q772

Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Authorized (Subscriber+) Chatbot Settings Update

Priority LOW 25

The Cliengo – Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_session' function in all versions up to, and including, 3.0.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00461 Published 2024-07-09 No fix listed CWE-862