Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in AI ChatBot 4.7.8

  • Severity: high-risk
  • Status: Fixed
  • Publication: November 23, 2023

The AI ChatBot plugin for WordPress is vulnerable to a type of cyberattack called SQL Injection in all versions up to, and including, 4.7.8. This vulnerability happens because the plugin does not properly secure the user-supplied information, and does not prepare the existing SQL query well enough. This means that an administrator can add extra SQL queries that can be used to access sensitive information from the database.

Detected in:

AI ChatBot fixed vulnerable versions: >= * <= 4.7.8
AI ChatBot – WPBot fixed vulnerable versions:
AI ChatBot for WordPress – WPBot fixed vulnerable versions:
ChatBot with AI fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.