CVE-2025-0329: AI ChatBot for WordPress – WPBot < 6.2.4 - Admin+ Stored XSS
The AI ChatBot for WordPress WordPress plugin before 6.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed (for example in multisite setup).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0329?
CVE-2025-0329 is considered a high severity vulnerability due to the potential for Stored Cross-Site Scripting (XSS) attacks.
How do I fix CVE-2025-0329?
To fix CVE-2025-0329, update the AI ChatBot for WordPress plugin to version 6.2.4 or later.
Who is affected by CVE-2025-0329?
CVE-2025-0329 affects users of the AI ChatBot for WordPress plugin in versions prior to 6.2.4.
What kind of attack does CVE-2025-0329 enable?
CVE-2025-0329 enables high privilege users to perform Stored Cross-Site Scripting attacks on the WordPress site.
What are the implications of CVE-2025-0329 for WordPress sites?
The implications of CVE-2025-0329 for WordPress sites include potential unauthorized script execution, data theft, and compromised site integrity.