https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T20:55:34.732612+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-87959 CVE-2026-87959 — WPBot 8.7.2 - 8.7.5 - Subscriber+ Claude AI Settings Update 2026-09-28T20:55:34.733326+00:00

Affected: Unknown WPBot

The WPBot WordPress plugin before 8.7.6 does not perform a capability check on the AJAX action that saves its Claude AI provider settings, allowing users with subscriber-level access to overwrite those settings, including the API key used for the WPBot WordPress plugin before 8.7.6's outgoing AI requests.