EUVD-2026-40889
GHSA-x882-f7rv-28ch
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Unauthenticated network injection via a publicly exposed nonce (PR:N/AC:L) with scope change into an admin browser (S:C) yields limited confidentiality/integrity impact typical of stored XSS.
Primary rating from Vendor (Wordfence).
CVSS VectorVendor: Wordfence
Lifecycle Timeline
2DescriptionCVE.org
The WPBot - AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.4.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The AJAX nonce required to authenticate the save request is publicly emitted on every frontend page via wp_localize_script, making it freely obtainable by any anonymous visitor and removing any practical barrier to exploitation.
Articles & Coverage 1
AnalysisAI
Stored cross-site scripting in the WPBot AI ChatBot for WordPress (all versions through 8.4.9) lets unauthenticated attackers persist arbitrary JavaScript through the 'conversation' parameter, which later executes when the injected page is viewed - most notably by an administrator opening the chat-session reports in wp-admin. Because the AJAX nonce that guards the save endpoint is publicly emitted on every frontend page via wp_localize_script, any anonymous visitor can obtain it, so there is effectively no barrier to injection. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV; risk stems from ease of exploitation rather than confirmed in-the-wild abuse.
Technical ContextAI
The affected component is the WordPress plugin 'WPBot - AI ChatBot for Live Support, Lead Generation, AI Services' by QuantumCloud (CPE cpe:2.3:a:quantumcloud:wpbot_-_ai_chatbot...). The root cause is CWE-79 (Improper Neutralization of Input During Web Page Generation): chat conversation content submitted through the plugin's AJAX handler is stored without sufficient input sanitization and rendered without adequate output escaping when a session is displayed. The referenced source files (wpbot-chat-sessions.php lines 509/644 and the report partial view-single-chat.php line 148) indicate the payload is saved on the frontend save-conversation path and later reflected into the admin-facing single-chat report view, so the sink executes in an authenticated administrator's browser context. WordPress AJAX nonces are intended as a CSRF/authentication token, but here the nonce is broadcast to anonymous clients via wp_localize_script, defeating its protective purpose.
RemediationAI
Upstream fix available (changeset 3591600 in the WordPress plugin repository); a released patched version was not independently confirmed from the provided data, so update WPBot to the latest available release above 8.4.9 as published by QuantumCloud and confirm the version in wp-admin after upgrading. Consult the Wordfence advisory (https://www.wordfence.com/threat-intel/vulnerabilities/id/124f2b72-d8da-46ba-844f-e9cc01441702?source=cve) for the fixed-version designation before deploying. Until patched, compensating controls include deploying a WAF/virtual-patch rule (e.g., Wordfence) to filter script payloads on the chatbot save-conversation AJAX request, restricting access to the chat-session report pages in wp-admin to trusted administrators, and disabling or deactivating the WPBot chatbot if it is not business-critical - noting the trade-off that deactivation removes live-chat/lead-capture functionality and WAF rules may need tuning to avoid blocking legitimate chat content.
More in Wordpress Plugin
View allThe Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
The Hash Form - Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing fil
Authentication bypass in the LiteSpeed Cache WordPress plugin (versions prior to 6.5.0.1) allows unauthenticated remote
The Simple File List plugin for WordPress through version 4.2.2 contains an unauthenticated remote code execution vulner
The SureTriggers WordPress plugin through version 1.0.82 contains a privilege escalation vulnerability that allows unaut
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via
The Business Directory Plugin - Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based
SQL injection in the NotificationX WordPress plugin (versions up to and including 2.8.2) allows unauthenticated remote a
The POST SMTP Mailer - Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress i
The MasterStudy LMS WordPress Plugin - for Online Courses and Education plugin for WordPress is vulnerable to union base
The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘hash’ parameter in
Remote code execution in the WP Query Console WordPress plugin (versions up to and including 1.0) by Ajit Bohra allows u
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today