CVE-2025-60223: WordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerability
Published Jun 17, 2026
·Updated
Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot <= 13.6.5 versions.
Affected Software
1 affected component
QuantumCloud WPBot Pro WordPress Chatbot<=13.6.5
Event History
Jun 17, 2026
CVE Published
via MITRE·09:50 AM
Data Sourced
via MITRE·09:50 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:19 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-60223?
CVE-2025-60223 has a severity rating of high at 7.7.
2
How do I fix CVE-2025-60223?
To fix CVE-2025-60223, update the WPBot Pro WordPress Chatbot plugin to version 13.6.6 or later.
3
What type of vulnerability is CVE-2025-60223?
CVE-2025-60223 is an Arbitrary File Deletion vulnerability due to path traversal in the WPBot Pro plugin.
4
Who is affected by CVE-2025-60223?
Subscribers of sites using WPBot Pro WordPress Chatbot versions 13.6.5 and earlier are affected by CVE-2025-60223.
5
When was CVE-2025-60223 published?
CVE-2025-60223 was published on June 17, 2026.