Medium
CVE-2024-29090
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 281
Reset filters
Medium
CVE-2024-2845
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer For Elementor & Gutenberg <= 3.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-27991
SupportCandy <= 3.2.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-27963
Crisp <= 0.44 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-0378
AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2024-22309
ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-0699
AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url
Critical
CVE-2023-51409
AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload
Medium
CVE-2023-51528
GPT3 AI Content Writer <= 1.8.12 - Cross-Site Request Forgery
Medium
CVE-2023-51527
AI Power: Complete AI Pack – Powered by GPT-4 <= 1.8.1 - Missing Authorization to Sensitive Data Exposure
Medium
CVE-2023-5691
Chatbot for WordPress <= 2.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-48741
ChatBot <= 4.7.8 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-47762
BetterDocs <= 2.5.2 - Missing Authorization via AJAX actions
Medium
CVE-2023-5606
ChatBot 4.8.6 - 4.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder
Medium
CVE-2023-5254
AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user
Medium
CVE-2023-5533
AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions
Medium
CVE-2023-5534
AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions
Critical
CVE-2023-5212
AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file
Critical
CVE-2023-5204
AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response
Critical
CVE-2023-5241
AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file
Medium
CVE-2023-44993
ChatBot <= 4.7.8 - Cross-Site Request Forgery via qc_wp_latest_update_check
Medium
CVE-2023-4253
ChatBot <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder
Medium
CVE-2023-4254
ChatBot 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in Language Settings
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.