CVE-2026-14185 — WPBot AI ChatBot < 8.2.0 - Subscriber+ RAG Settings Update

CVE-2026-14185

WPBot AI ChatBot < 8.2.0 - Subscriber+ RAG Settings Update PUBLISHED

Description (CNA)

The WPBot WordPress plugin before 8.2.0 does not perform a capability or nonce check in one of its retrieval-augmented-generation settings handlers, allowing authenticated users with subscriber-level access to modify the WPBot WordPress plugin before 8.2.0's configuration.

Affected (CNA)

Vendor / product	Versions
Unknown / WPBot	affected 0 before 8.2.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/a6839476-95bf-4785-b128-1e3bc8603ddc/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.