QuantumCloud WPBot – AI ChatBot for Live Support, Lead Generation, AI Services

• CVE-2026-83593 High 7.2 WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter 0.5%
• CVE-2026-16773 Medium 5.3 WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action 0.5%
• CVE-2026-16774 Medium 5.3 WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action 0.4%
• CVE-2026-15610 Medium 4.3 WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function 0.4%
• CVE-2026-15106 Medium 5.3 WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter 0.5%
• CVE-2026-13731 High 7.2 WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter 0.9%
• CVE-2024-6669 Medium 5.5 AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
• CVE-2024-0453 Medium 5.0 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback 0.4%
• CVE-2024-0452 Medium 5.0 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback 0.4%
• CVE-2024-0451 Medium 5.0 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback 0.4%
• CVE-2023-5533 Medium 5.3 AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions 0.6%
• CVE-2023-5534 Medium 4.3 AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions 0.2%
• CVE-2023-5254 Medium 5.3 AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user 0.9%
• CVE-2023-5212 Critical 9.6 AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file 2.0%
• CVE-2023-5204 Critical 9.8 AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response 7.8%
• CVE-2023-5241 Critical 9.6 AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file 2.6%