Known vulnerabilities in the Wpbot plugin

25 security advisories have been published for the Wpbot plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

Wpbot - SQL Injection (CVE-2026-14189) LOW 2026-07-27
Wpbot - Cross-Site Request Forgery (CSRF) (CVE-2026-14185) MEDIUM 2026-07-21
Wpbot - Cross-Site Scripting (XSS) (CVE-2025-9111) LOW 2025-09-09
Wpbot - Cross-Site Scripting (XSS) (CVE-2025-0329) MEDIUM 2025-05-15
Wpbot - Cross-Site Scripting (XSS) (CVE-2024-6669) MEDIUM 2024-07-17
Wpbot - Broken Access Control (CVE-2024-0453) MEDIUM 2024-05-22
Wpbot - Broken Access Control (CVE-2024-0452) MEDIUM 2024-05-22
Wpbot - Broken Access Control (CVE-2024-0451) MEDIUM 2024-05-22
Wpbot - Cross-Site Scripting (XSS) (CVE-2023-5606) MEDIUM 2023-11-02
Wpbot - Broken Access Control (CVE-2023-5533) MEDIUM 2023-10-20
Wpbot - Cross-Site Request Forgery (CSRF) (CVE-2023-5534) MEDIUM 2023-10-20
Wpbot - Information Disclosure (CVE-2023-5254) MEDIUM 2023-10-19
Wpbot - Path Traversal (CVE-2023-5241) CRITICAL 2023-10-19
Wpbot - Security Vulnerability (CVE-2023-5212) CRITICAL 2023-10-19
Wpbot - SQL Injection (CVE-2023-5204) CRITICAL 2023-10-19
Wpbot - Cross-Site Scripting (XSS) (CVE-2023-4254) MEDIUM 2023-09-04
Wpbot - Cross-Site Scripting (XSS) (CVE-2023-4253) MEDIUM 2023-09-04
Wpbot - Cross-Site Scripting (XSS) (CVE-2023-3175) MEDIUM 2023-07-10
Wpbot - Cross-Site Scripting (XSS) (CVE-2023-2811) MEDIUM 2023-06-19
Wpbot - Cross-Site Scripting (XSS) (CVE-2023-2742) MEDIUM 2023-06-19
Wpbot - Cross-Site Scripting (XSS) (CVE-2023-1660) MEDIUM 2023-05-08
Wpbot - PHP Object Injection (CVE-2023-1650) CRITICAL 2023-05-08
Wpbot - Cross-Site Scripting (XSS) (CVE-2023-1011) MEDIUM 2023-05-08
Wpbot - Cross-Site Scripting (XSS) (CVE-2023-1651) MEDIUM 2023-05-08
Wpbot - Cross-Site Scripting (XSS) (CVE-2023-1649) MEDIUM 2023-05-08

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.