Log out
Get PRO

Latest

Input validation vulnerability in AI Chatbot for WordPress – Hyve Lite 1.2.2

  • Severity: medium-risk
  • Status: Fixed
  • Publication: January 24, 2025

The AI Chatbot for WordPress – Hyve Lite plugin for WordPress has a security vulnerability that can be exploited by hackers. This vulnerability exists in versions 1.2.2 and below, and is caused by not properly cleaning up user input and output. This allows attackers with high level access to add their own malicious code to pages, which will then run whenever a user visits that page. Only websites with multiple sub-sites or with certain security settings are affected by this vulnerability.

Detected in:

AI Chatbot for WordPress – Hyve Lite fixed vulnerable versions: >= * <= 1.2.2
Hyve Lite — Conversational AI Chatbot fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.