Vulnerabilidades de Wisdmlabs
CVEs publicadas que afetam produtos de Wisdmlabs: 3 registro(s), com severidade, exploração e correções.
CVE-2026-39729
Alta · 7.2
CWE-201 06/10/2026
WordPress Edwiser Bridge plugin <= 4.3.4 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions.
CVE-2026-24570
Média · 5.4
CWE-862 23/01/2026
WordPress Edwiser Bridge plugin <= 4.3.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through <= 4.3.2.
CVE-2025-13887
Média · 6.4
CWE-79 07/01/2026
AI BotKit <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
The AI BotKit – AI Chatbot & Live Support for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in the `ai_botkit_widget` shortcode in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.