Medium
CVE-2024-38790
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 281
Reset filters
Medium
CVE-2024-6669
AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-6498
Chatbot for WordPress by Collect.chat ⚡️ <= 2.4.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-37923
Cliengo – Chatbot <= 3.0.4 - Cross-Site Request Forgery
Medium
CVE-2024-5992
Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Unauthenticated Chatbot Settings Update
Medium
CVE-2024-5993
Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Authorized (Subscriber+) Chatbot Settings Update
Medium
CVE-2024-37465
GPT3 AI Content Writer <= 1.8.66 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-5969
AIomatic - Automatic AI Content Writer <= 2.0.5 - Unauthenticated Arbitrary Email Sending
Medium
CVE-2024-35738
Kognetiks Chatbot for WordPress <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0453
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback
Medium
CVE-2024-0452
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback
Medium
CVE-2024-0451
AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback
Critical
CVE-2024-32700
Kognetiks Chatbot for WordPress <= 2.0.0 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-4560
Kognetiks Chatbot for WordPress <= 1.9.9 - Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function
Medium
CVE-2024-34442
weDocs <= 2.1.4 - Missing Authorization
Critical
CVE-2024-34440
AI Engine: ChatGPT Chatbot <= 2.2.63 - Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2024-34435
Aiomatic <= 1.9.3 - Missing Authorization
Medium
CVE-2024-34380
Conversational Forms for ChatBot <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-2220
Button contact VR <= 4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-32729
Conversational Forms for ChatBot <= 1.1.8 - Unauthenticated Arbitrary File Download
Medium
CVE-2023-49742
Support Genix <= 1.2.3 - Missing Authorization
Critical
CVE-2024-31370
AIKit <= 4.14.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-30436
collectchat <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-30226
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg <= 3.3.3 - Unauthenticated PHP Object Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.