https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T17:51:05.614598+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-87916 fkie_cve-2026-87916 2026-09-28T17:51:05.633598+00:00

The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to retrieve the name, email address and phone number of every chat visitor by requesting a wide date range.

 https://db.gcve.eu/vuln/ghsa-gpj8-3p6v-p7h3 GHSA-gpj8-3p6v-p7h3 2026-09-28T17:51:05.633696+00:00

The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to retrieve the name, email address and phone number of every chat visitor by requesting a wide date range.