Quantumcloud Chatbot
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Quantumcloud Chatbot.
By the Year
In 2026 there have been 7 vulnerabilities in Quantumcloud Chatbot with an average score of 7.6 out of ten. Last year, in 2025 Chatbot had 3 security vulnerabilities published. That is, 4 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 2.83.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 7 | 7.63 |
| 2025 | 3 | 4.80 |
| 2024 | 0 | 0.00 |
| 2023 | 2 | 5.65 |
It may take a day or so for new Chatbot vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Quantumcloud Chatbot Security Vulnerabilities
PHP Object Injection in Conversational Forms <= 1.5.0
CVE-2026-95531
8.8 - High
- September 30, 2026
Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.
Marshaling, Unmarshaling
QuantumCloud ChatBot Stored XSS before v8.3.8 (CVE-2026-57363)
CVE-2026-57363
7.1 - High
- July 13, 2026
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: from n/a through <= 8.3.7.
XSS
Stored XSS in WoowBot <=4.6.1 (WordPress)
CVE-2026-57414
6.5 - Medium
- July 13, 2026
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot for eCommerce – WoowBot woowbot-woocommerce-chatbot allows Stored XSS.This issue affects ChatBot for eCommerce – WoowBot: from n/a through <= 4.6.1.
XSS
Unauth XSS in ChatBot <= 8.3.2
CVE-2026-57362
7.1 - High
- July 02, 2026
Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions.
XSS
QuantumCloud Conversational Forms for ChatBot Path Trv (<1.1.8)
CVE-2024-32729
7.5 - High
- June 17, 2026
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud Conversational Forms for ChatBot allows Path Traversal. This issue affects Conversational Forms for ChatBot: from n/a through 1.1.8.
Directory traversal
ChatBot <=7.9.7: Subscriber Broken Access Control
CVE-2026-40788
7.1 - High
- June 15, 2026
Subscriber Broken Access Control in ChatBot <= 7.9.7 versions.
AuthZ
QuantumCloud ChatBot <=7.7.9 Blind SQLi Vulnerability
CVE-2026-32499
9.3 - Critical
- March 25, 2026
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL Injection.This issue affects ChatBot: from n/a through <= 7.7.9.
SQL Injection
QuantumCloud ChatBot <7.3.9 : Missing Auth Exploit (Incorrect ACL)
CVE-2025-64277
5.3 - Medium
- November 13, 2025
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through <= 7.3.9.
AuthZ
QuantumCloud ChatBot 7.3.0 Missing Auth Exploits Insecure Access
CVE-2025-62952
4.3 - Medium
- October 27, 2025
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through <= 7.7.3.
AuthZ
QuantumCloud ChatBot 6.3.5 LFI via PHP Include/Require
CVE-2025-26932
- February 25, 2025
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in QuantumCloud ChatBot chatbot allows PHP Local File Inclusion.This issue affects ChatBot: from n/a through <= 6.3.5.
Remote file include
QuantumCloud Conversational Forms ChatBot 1.1.6 XSS (Auth Admin+)
CVE-2023-23981
5.9 - Medium
- April 06, 2023
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud Conversational Forms for ChatBot plugin <= 1.1.6 versions.
XSS
QuantumCloud AI ChatBot Plugin CSRF <=4.2.8 (CVE-2023-24415)
CVE-2023-24415
5.4 - Medium
- February 23, 2023
Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.2.8 versions.
Session Riding
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Quantumcloud Chatbot or by Quantumcloud? Click the Watch button to subscribe.
