Known vulnerabilities in the Chatbot plugin

18 security advisories have been published for the Chatbot plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

Chatbot - Broken Access Control (CVE-2026-16774) MEDIUM 2026-07-28
Chatbot - Information Disclosure (CVE-2026-16773) MEDIUM 2026-07-28
Chatbot - Broken Access Control (CVE-2026-15610) MEDIUM 2026-07-16
Chatbot - Broken Access Control (CVE-2026-15106) MEDIUM 2026-07-16
ChatBot - Cross-Site Scripting (XSS) (CVE-2026-57362) HIGH 2026-07-02
Chatbot - Cross-Site Scripting (XSS) (CVE-2026-13731) HIGH 2026-07-01
ChatBot - Broken Access Control (CVE-2026-40788) HIGH 2026-06-15
Chatbot - Cross-Site Scripting (XSS) (CVE-2024-6669) MEDIUM 2024-07-17
Chatbot - Broken Access Control (CVE-2024-5992) MEDIUM 2024-07-09
Chatbot - Broken Access Control (CVE-2024-5993) MEDIUM 2024-07-09
Chatbot - Broken Access Control (CVE-2024-0453) MEDIUM 2024-05-22
Chatbot - Broken Access Control (CVE-2024-0452) MEDIUM 2024-05-22
Chatbot - Broken Access Control (CVE-2024-0451) MEDIUM 2024-05-22
Chatbot - Cross-Site Scripting (XSS) (CVE-2023-5691) MEDIUM 2024-01-11
Chatbot - Information Disclosure (CVE-2023-5254) MEDIUM 2023-10-19
Chatbot - Path Traversal (CVE-2023-5241) CRITICAL 2023-10-19
Chatbot - Security Vulnerability (CVE-2023-5212) CRITICAL 2023-10-19
Chatbot - SQL Injection (CVE-2023-5204) CRITICAL 2023-10-19

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.