WordPress plugin
Geeky Bot – AI Chatbot & Sales Assistant for WooCommerce security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High6
- Medium1
- Low0
All Geeky Bot – AI Chatbot & Sales Assistant for WooCommerce vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.2.6Update to 1.2.7 | CVE-2026-61965 | |
| High7.5 | Unauthenticated SQL Injection ≤1.2.5Update to 1.2.6 | CVE-2026-57679 | |
| Critical9.8 | Missing Authorization to Unauthenticated Arbitrary Plugin Installation via 'geekybot_frontendajax' AJAX Action ≤1.2.2Update to 1.2.3 | CVE-2026-5294 | |
| High7.5 | Unauthenticated SQL Injection via 'attributekey' ≤1.2.0Update to 1.2.1 | CVE-2026-3456 | |
| High8.8 | Unauthenticated Arbitrary File Upload ≤1.2.2Update to 1.2.3 | CVE-2026-40772 | |
| High7.5 | Unauthenticated SQL Injection ≤1.2.0Update to 1.2.1 | CVE-2026-39519 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.1.8Update to 1.1.9 | CVE-2025-15266 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.2.6Update to 1.2.7
- High7.5Unauthenticated SQL Injection
≤1.2.5Update to 1.2.6
- Critical9.8Missing Authorization to Unauthenticated Arbitrary Plugin Installation via 'geekybot_frontendajax' AJAX Action
≤1.2.2Update to 1.2.3
- High7.5Unauthenticated SQL Injection via 'attributekey'
≤1.2.0Update to 1.2.1
- High8.8Unauthenticated Arbitrary File Upload
≤1.2.2Update to 1.2.3
- High7.5Unauthenticated SQL Injection
≤1.2.0Update to 1.2.1
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.1.8Update to 1.1.9
Geeky Bot – AI Chatbot & Sales Assistant for WooCommerce: common questions
Does Geeky Bot – AI Chatbot & Sales Assistant for WooCommerce have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Geeky Bot – AI Chatbot & Sales Assistant for WooCommerce: 1 critical, 6 high, 1 medium. None are known to affect version null.
How do I check which version of Geeky Bot – AI Chatbot & Sales Assistant for WooCommerce I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Geeky Bot – AI Chatbot & Sales Assistant for WooCommerce vulnerability?
CVE-2026-61965, published Aug 6, 2026: Geeky Bot – AI Sales Assistant for WooCommerce <= 1.2.6 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any Geeky Bot – AI Chatbot & Sales Assistant for WooCommerce vulnerability listed in CISA KEV?
No. None of the known Geeky Bot – AI Chatbot & Sales Assistant for WooCommerce vulnerabilities is currently listed in the CISA KEV catalog.