Filtered by vendor Wordpress-extensions Subscriptions
Filtered by product Wpbot Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-14185 1 Wordpress-extensions 1 Wpbot 2026-11-10 4.3 Medium
The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-generation settings handlers, allowing authenticated users with subscriber-level access to modify the WPBot WordPress plugin before 8.2.0's configuration.