Vulnerabilities

QuantumCloud WPBot 4.9.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs

AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions

Published 2023-10-20 · Modified

9.8EPSS 0.005

AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file

Published 2023-10-19 · Modified

9.6EPSS 0.021

AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file

Published 2023-10-19 · Modified

9.6EPSS 0.016

AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions

Published 2023-10-20 · Modified

5.4EPSS 0.002