1
CVEs
0
Critical
1
High
0
KEV
0
PoC
1
Unpatched C/H
0.0%
Patch Rate
0.3%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (18)
Wordpress Plugin
34
Wpbot
26
Wpbot Ai Chatbot For Live Support Lead Generation Ai Services
6
Chatbot
5
PHP
4
Simple Link Directory
4
Slider Hero
3
Conversational Forms For Chatbot
2
Simple Video Directory
2
Wpot
1
Wpbot Pro Wordpress Chatbot
1
Comment Link Remove And Other Comment Tools
1
Infographic Maker
1
Simple Business Directory Pro
1
Simple Link Directory Pro
1
Woowbot Pro Max
1
Slider Hero With Video Background Animation
1
Chatbot For Ecommerce 8211 Woowbot
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-83593 | Stored Cross-Site Scripting in the WPBot AI ChatBot WordPress plugin (QuantumCloud, all versions through 8.7.3) allows unauthenticated remote attackers to inject persistent JavaScript into pages viewed by site users and administrators. The critical design flaw is that the only access gate - a WordPress nonce - is rendered useless because it is embedded in every public-facing page via wp_localize_script, making it fully readable by any visitor. No public exploit code has been identified at time of analysis, but the low attack complexity and zero-authentication requirement make this a straightforward exploitation path for opportunistic attackers targeting WordPress sites. | HIGH | 7.2 | 0.3% | 36 |
No patch
|