Skip to main content

Wpot

2 CVEs product

Monthly

CVE-2024-12879 Jan 22, 06:15 MEDIUM Monitor

The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'qc_wp_latest_update_check_pro' function in all. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wpot Quantumcloud
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2024-13091 Jan 22, 00:15 CRITICAL This Week

The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'qcld_wpcfb_file_upload' function in all versions up to, and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 10.2% and no vendor patch available.

WordPress RCE File Upload Wpot Wpbot
NVD
CVSS 3.1
9.8
EPSS
10.2%
EPSS 0% CVSS 4.3
MEDIUM Monitor

The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'qc_wp_latest_update_check_pro' function in all. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wpot +1
NVD
EPSS 10% CVSS 9.8
CRITICAL This Week

The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'qcld_wpcfb_file_upload' function in all versions up to, and. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 10.2% and no vendor patch available.

WordPress RCE File Upload +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy