Extension WordPress

Vulnérabilités WPBot – ChatBot Conversational Forms

Cette page rassemble les failles publiées pour WPBot – ChatBot Conversational Forms, leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
0Critiques
4Avec correctif
7,5CVSS maximal

Historique de sécurité

CVE et vulnérabilités de WPBot – ChatBot Conversational Forms

4 fiches

CVE-2025-22813 Moyenne · 6,4
WPBot – ChatBot Conversational Forms

Conversational Forms for ChatBot <= 1.4.2 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Conversational Forms for ChatBot plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…

Versions affectées

*-1.4.2

Correctif

1.4.3

Publication

07/01/2025

CVE-2024-34380 Moyenne · 4,4
WPBot – ChatBot Conversational Forms

Conversational Forms for ChatBot <= 1.2.0 – Authenticated (Administrator+) Stored Cross-Site Scripting

The ChatBot Conversational Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

Versions affectées

*-1.2.0

Correctif

1.3.0

Publication

03/05/2024

CVE-2024-32729 Élevée · 7,5
WPBot – ChatBot Conversational Forms

Conversational Forms for ChatBot <= 1.1.8 – Unauthenticated Arbitrary File Download

The ChatBot Conversational Forms plugin for WordPress is vulnerable to Arbitrary File Download in all versions up to, and including, 1.1.8. This makes it possible for unauthenticated attackers to download arbitrary files from the server which may contain…

Versions affectées

*-1.1.8

Correctif

1.2.0

Publication

22/04/2024

CVE-2023-23981 Moyenne · 5,5
WPBot – ChatBot Conversational Forms

Conversational Forms for ChatBot <= 1.1.6 – Authenticated (Administrator+) Stored Cross-Site Scripting

The Conversational Forms for ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via a form name in versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

Versions affectées

*-1.1.6

Correctif

1.1.7

Publication

20/01/2023

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités