Ai Chatbot For Wordpress Hyve Lite
Monthly
Authorization bypass in Themeisle's AI Chatbot for WordPress - Hyve Lite plugin (versions through 2.0.2) allows unauthenticated remote attackers to modify chatbot-related records they do not own by supplying a user-controlled object identifier, per the assessed CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. This is a moderate-severity IDOR (CWE-639) tracked as CVE-2026-97305 and scored CVSS 4.0 6.9; exploitation is limited to a Low integrity impact, with no confidentiality or availability effect, and no public exploit was identified at time of analysis.
Authorization bypass in Themeisle's AI Chatbot for WordPress - Hyve Lite plugin (versions through 2.0.2) allows unauthenticated remote attackers to modify chatbot-related records they do not own by supplying a user-controlled object identifier, per the assessed CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. This is a moderate-severity IDOR (CWE-639) tracked as CVE-2026-97305 and scored CVSS 4.0 6.9; exploitation is limited to a Low integrity impact, with no confidentiality or availability effect, and no public exploit was identified at time of analysis.