ai_chatbot_for_woocommerce_woowbot vulnerabilities

CVEs whose affected-version data names the ai_chatbot_for_woocommerce_woowbot package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111372Medium· 4.3

1w ago

AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action

The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.0.0. This is due to the plugin not properly verifying that a user is authorized to perform an act…

▾ Sunlitquantumcloud · AI ChatBot for WooCommerce – WoowBotEPSS 0.27%via CVEORG