CVE-2026-15048 — GeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat History

CVE-2026-15048

GeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat History PUBLISHED

Description (CNA)

The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to retrieve chat-history session metadata including WordPress usernames, user IDs, and timestamps.

Affected (CNA)

Vendor / product	Versions
Unknown / Geeky Bot	affected 0 before 1.2.8

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/881d1548-e6c3-4093-ab8c-dc3a9fcccc34/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.