Vulnerability history

Broken Access Control vulnerability

Broken Access Control vulnerability

Admin+ Stored XSS vulnerability

Broken Access Control Vulnerability

Admin+ Stored XSS vulnerability

Local File Inclusion vulnerability

Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Missing Authorization via multiple functions vulnerability

Unauthenticated PHP Object Injection vulnerability

SQL Injection vulnerability

Wordpress ChatBot plugin 4.8.6 - 4.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder vulnerability

Unauthenticated SQL Injection via qc_wpbo_search_response vulnerability

Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file vulnerability

Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file vulnerability

Cross-Site Request Forgery on AJAX actions vulnerability

Missing Authorization on AJAX actions vulnerability

Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Admin+ Stored XSS in Language Settings vulnerability

Admin+ Stored XSS in FAQ Builder vulnerability

Admin+ Stored Cross-Site Scripting vulnerability

Admin+ Stored Cross-Site Scripting vulnerability

Auth. OpenAI Settings Update to Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability

Unauth. PHP Object Injection vulnerability

Stored XSS via CSRF vulnerability

Missing Authorization on openai_settings_option_callback vulnerability

Multiple Cross Site Scripting (XSS)

Cross Site Request Forgery (CSRF)