| |
Vulnerability CVE-2023-1650
Published: 2023-05-08
| Description: |
The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauthenticated users, which could allow them to perform PHP Object Injection when a suitable gadget is present on the blog |
Type:
CWE-502 (Deserialization of Untrusted Data)
References: |
https://wpscan.com/vulnerability/7d7fe498-0aa3-4fa7-b560-610b42b2abed
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
