CVE-2026-14185

CVSS Score & Metrics

Base Score

4.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N                                    

Vulnerability Description

The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-generation settings handlers, allowing authenticated users with subscriber-level access to modify the WPBot WordPress plugin before 8.2.0's configuration.

Vulnerability Details

Published Date

July 21, 2026

Last Modified

July 21, 2026

CWE ID

CWE-862

Source

NVD

Vendor

Unknown

Product

WPBot

External References

https://wpscan.com/vulnerability/a6839476-95bf-4785-b128-1e3bc8603ddc/

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment