Vulnerabilities > Wpbot > Wpot

DATE CVE VULNERABILITY TITLE RISK
2025-01-22 CVE-2024-13091 Unrestricted Upload of File with Dangerous Type vulnerability in Wpbot Wpot
The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'qcld_wpcfb_file_upload' function in all versions up to, and including, 13.5.4.
network
low complexity
wpbot CWE-434
critical
9.8