https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:45:48.927894+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-87916 CVE-2026-87916 — WPBot 8.4.9 - 8.5.9 - Unauthenticated Chat Visitor PII Disclosure 2026-09-28T19:45:48.945878+00:00

Affected: Unknown WPBot

The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to retrieve the name, email address and phone number of every chat visitor by requesting a wide date range.