CVE-2026-87916 in WPBot Plugin
الملخص
بحسب MITRE • 12/09/2026
The WPBot WordPress plugin before 8.6.0 does not perform any capability or nonce check on the AJAX action that lists stored chat sessions, allowing unauthenticated attackers to retrieve the name, email address and phone number of every chat visitor by requesting a wide date range.
If you want to get best quality of vulnerability data, you may have to visit VulDB.