WordPress ChatBot Plugin <= 5.3.4 is vulnerable to Broken Access Control

Low priority No impactful threat

<= 5.3.4Vulnerable version(s)

5.3.6Patched version

22 May, 2024

Get the fastest vulnerability mitigation with Patchstack!

CVSS 5

As immediate action, update the affected plugin. If you're unable to do so, ask your hosting provider or web developer for help.

Similar CVE IDs: CVE-2024-0451, CVE-2024-0453

Users can access pages or perform actions they shouldn't be allowed to, like viewing other people's data.

CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.

This security issue has a low severity impact and is unlikely to be exploited.

Update to version 5.3.6 or later to resolve the vulnerability. Patchstack users can turn on auto-update for vulnerable plugins only.

Have additional information or questions about this entry? Let us know.

Go to

Published by Patchstack

22 May, 2024