PT-2026-60440 · Quantumcloud · Wpbot – Ai Chatbot For Live Support

Prism

·

CVE-2026-15106

·

Published

2026-07-16

·

Updated

2026-07-16

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions WPBot – AI ChatBot for Live Support, Lead Generation, AI Services versions prior to 8.5.7
Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Unauthenticated attackers can delete arbitrary chat session records, including chat history and conversation logs, from the wpbot user and wpbot conversation tables by providing a crafted userid value.
Recommendations Update WPBot – AI ChatBot for Live Support, Lead Generation, AI Services to version 8.5.7 or later.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-15106

Affected Products

Wpbot – Ai Chatbot For Live Support