WordPress plugin
WPBot Pro Wordpress Chatbot security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High2
- Medium1
- Low0
All WPBot Pro Wordpress Chatbot vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Authenticated (Subscriber+) Arbitrary File Deletion ≤13.6.5No patch available | CVE-2025-60223 | |
| High8.1 | Authenticated (Subscriber+) Arbitrary File Deletion ≤13.6.2Update to 13.7.0 | CVE-2025-3812 | |
| Critical9.8 | Unauthenticated PHP Object Injection ≤12.7.0No patch available | CVE-2025-47582 | |
| Critical9.8 | Unauthenticated Arbitrary File Upload ≤13.5.4Update to 13.5.6 | CVE-2024-13091 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Simple Text Response Creation ≤13.5.5Update to 13.5.6 | CVE-2024-12879 |
- High8.1Authenticated (Subscriber+) Arbitrary File Deletion
≤13.6.5No patch available
- High8.1Authenticated (Subscriber+) Arbitrary File Deletion
≤13.6.2Update to 13.7.0
- Critical9.8Unauthenticated PHP Object Injection
≤12.7.0No patch available
- Critical9.8Unauthenticated Arbitrary File Upload
≤13.5.4Update to 13.5.6
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Simple Text Response Creation
≤13.5.5Update to 13.5.6
WPBot Pro Wordpress Chatbot: common questions
Does WPBot Pro Wordpress Chatbot have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in WPBot Pro Wordpress Chatbot: 2 critical, 2 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of WPBot Pro Wordpress Chatbot I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WPBot Pro Wordpress Chatbot vulnerability?
CVE-2025-60223, published May 19, 2025: WPBot Pro Wordpress Chatbot <= 13.6.5 - Authenticated (Subscriber+) Arbitrary File Deletion. Severity: High (CVSS 8.1).
Is any WPBot Pro Wordpress Chatbot vulnerability listed in CISA KEV?
No. None of the known WPBot Pro Wordpress Chatbot vulnerabilities is currently listed in the CISA KEV catalog.