Known vulnerabilities in WPBot – AI ChatBot for Live Support, Lead Generation, AI Services

AI ChatBot for WordPress WPBot - Automated 24/7 Live Chat Customer Support. NATIVE, Lead Generation, Forms, Gemini, DialogFlow, ChatGPT, OpenRouter

32Reported vulnerabilities

9.8Highest CVSS score

8.6.9Latest version

5,000+Active installs

What to do now

Update WPBot – AI ChatBot for Live Support, Lead Generation, AI Services to 8.6.0 or later. 32 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-5204	High 7.5	6.8%	Before 4.9.1	`4.9.1`	October 19, 2023
CVE-2024-22309	Critical 9.8	0.5%	5.1.0 and earlier	`5.1.1`	January 19, 2024
CVE-2023-5254	Medium 5.3	0.8%	Before 4.9.1	`4.9.1`	October 19, 2023
CVE-2025-26932	High 8.8	0.8%	6.3.5 and earlier	`6.3.6`	February 23, 2025
CVE-2023-5241	High 8.1	2.1%	Before 4.9.1 4.9.2 to 4.9.2 (inclusive)	`4.9.1`	October 19, 2023
CVE-2023-5212	High 8.1	1.6%	Before 4.9.1 4.9.2 to 4.9.2 (inclusive)	`4.9.1`	October 19, 2023
CVE-2024-0453	High 7.7	0.4%	0 to 5.3.4 (inclusive)	`5.3.6`	May 22, 2024
CVE-2024-0452	High 7.7	0.4%	0 to 5.3.4 (inclusive)	`5.3.6`	May 22, 2024
CVE-2026-13731	High 7.2	0.9%	0 to 8.4.9 (inclusive)	`8.5.0`	July 1, 2026
CVE-2026-32499	High 7.5	0.3%	7.7.9 and earlier	`7.8.0`	March 20, 2026
CVE-2026-57363	High 7.2	0.3%	8.3.7 and earlier	`8.3.8`	July 6, 2026
CVE-2023-48741	High 7.2	0.7%	4.7.8 and earlier	`4.7.9`	November 23, 2023
CVE-2026-57362	Medium 6.1	0.3%	8.3.2 and earlier	`8.3.3`	July 1, 2026
CVE-2023-24415	Medium 5.4	0.3%	4.2.8 and earlier	`4.2.9`	January 27, 2023
CVE-2026-16774	Medium 5.3	0.2%	0 to 8.5.9 (inclusive)	`8.6.0`	July 28, 2026
CVE-2026-16773	Medium 5.3	0.3%	0 to 8.5.9 (inclusive)	`8.6.0`	July 28, 2026
CVE-2026-15106	Medium 5.3	0.5%	0 to 8.5.6 (inclusive)	`8.5.7`	July 16, 2026
CVE-2025-64277	Medium 5.3	0.3%	7.3.9 and earlier	`7.4.0`	October 12, 2025
CVE-2025-53200	Medium 5.4	0.2%	6.7.3 and earlier	`6.7.5`	June 27, 2025
CVE-2023-44993	Medium 5.3	0.2%	4.7.8 and earlier	`4.7.9`	October 3, 2023
WF-b33bf55c-0397-44a2-8c18-ea5f8f1e2ec9	Medium 5.4	—	4.4.7 and earlier	`4.4.8`	March 29, 2023
CVE-2024-0451	Medium 5	0.4%	0 to 5.3.4 (inclusive)	`5.3.6`	May 22, 2024
CVE-2026-14189	Medium 4.9	0.2%	8.5.1 and earlier	`8.5.2`	July 6, 2026
CVE-2024-6669	Medium 4.8	0.3%	Before 5.5.8	`5.5.8`	July 17, 2024
CVE-2023-5691	Medium 4.8	0.3%	2.3.9 and earlier	`2.4.0`	January 11, 2024
CVE-2025-9111	Medium 4.4	0.3%	7.0.0 and earlier	`7.1.0`	August 19, 2025
CVE-2025-0329	Medium 4.4	0.3%	6.2.3 and earlier	`6.2.4`	March 3, 2025
CVE-2022-47613	Medium 4.4	0.4%	4.3.0 and earlier	`4.3.1`	January 27, 2023
CVE-2026-15610	Medium 4.3	0.4%	0 to 8.5.6 (inclusive)	`8.5.7`	July 16, 2026
CVE-2026-14185	Medium 4.3	0.3%	8.1.0 and earlier	`8.2.0`	June 30, 2026
CVE-2026-40788	Medium 4.3	0.3%	7.9.7 and earlier	`7.9.9`	April 23, 2026
CVE-2025-62952	Medium 4.3	0.2%	7.7.3 and earlier	`7.7.4`	October 13, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.