PT-2026-66714 · Undefined · Undefined
CVE-2026-15048
·
Published
2026-07-31
·
Updated
2026-07-31
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to retrieve chat-history session metadata including WordPress usernames, user IDs, and timestamps.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined