Stored XSS in WordPress WPBot Plugin (CVE-2025-0329) with PoC

wpscan.com 2025-05-17查看中文 →

Security AdvisoryCVE-2025-0329LowBob Matyas

Affected:

AI ChatBot for WordPress - WPBot < 6.2.4

Fixed in:

6.2.4

Referenced CVEs: CVE-2025-0329

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from wpscan.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WordPress Simple Membership Pre-Auth Admin Account Takeover via Username Collision (CVE-2026-15930) 2026-08-03 Simply Schedule Appointments <1.6.12.11 Incorrect Authorisation Vulnerability (CVE-2026-15254) 2026-08-03 TaxoPress simple-tags < 3.51.0 IDOR Allows Private Post Disclosure (CVE-2026-15231) 2026-08-03 Simple Membership < 4.7.8 Unauthenticated Stored XSS (CVE-2026-15931) 2026-08-03 Dokan Lite < 5.0.9 IDOR Vulnerability via REST API (CVE-2026-16565) 2026-08-03

Offline Archive

Offline screenshot & PDF are Pro-exclusive