by Kastro
Paper/Archive/CVE-2023-5212

CVE-2023-5212

quantumcloud WPBot – AI ChatBot for Live Support, Lead Generation, AI Services — AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file

EPSS 2%CVSS 9.6
critical.is priorityof 100
45
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 80.6.806 × 2016.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The AI ChatBot plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 4.8.9 as well as version 4.9.2. This makes it possible for authenticated attackers with subscriber privileges to delete arbitrary files on the server, which makes it possible to take over affected sites as well as others sharing the same hosting account. Version 4.9.1 originally addressed the issue, but it was reintroduced in 4.9.2 and fixed again in 4.9.3.

Affected

ProductAffectedFixed inSource
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services≤ 4.8.9–CNA
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services4.9.2–CNA

Scores by source

Wordfence (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

References

refwordfence.com/threat-intel/vulnerabilities/id/5b3f4ccb-fcc6-42ec-8e9e-03d69ae7acf2?source=cverefplugins.trac.wordpress.org/browser/chatbot/trunk/includes/openai/qcld-bot-openai.php?rev=2957286#L576refplugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2977505%40chatbot%2Ftrunk&old=2967435%40chatbot%2Ftrunk&sfp_email=&sfph_mail=refpacketstormsecurity.com/files/175371/WordPress-AI-ChatBot-4.8.9-SQL-Injection-Traversal-File-Deletion.html