CVE-2023-5241

The AI ChatBot for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.8.9 as well as 4.9.2 via the qcld_openai_upload_pagetraining_file function. This allows subscriber-level attackers to append "<?php" to any existing file on the server resulting in potential DoS when appended to critical files such as wp-config.php.

• CWE-22
• CWE-22

• https://plugins.trac.wordpress.org/browser/chatbot/trunk/includes/openai/qcld-bot-openai.php#L376Product
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2977505%40chatbot%2Ftrunk&old=2967435%40chatbot%2Ftrunk&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/25199281-5286-4d75-8d27-26ce215e0993?source=cveThird Party Advisory
• http://packetstormsecurity.com/files/175371/WordPress-AI-ChatBot-4.8.9-SQL-Injection-Traversal-File-Deletion.htmlThird Party Advisory, VDB Entry
• https://plugins.trac.wordpress.org/browser/chatbot/trunk/includes/openai/qcld-bot-openai.php#L376Product
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2977505%40chatbot%2Ftrunk&old=2967435%40chatbot%2Ftrunk&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/25199281-5286-4d75-8d27-26ce215e0993?source=cveThird Party Advisory

Published

Oct 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52392Rejected reason: This is unused.
• CVE-2023-52395Rejected reason: This is unused.
• CVE-2023-52396Rejected reason: This is unused.
• CVE-2023-52398Rejected reason: This is unused.
• CVE-2023-52399Rejected reason: This is unused.
• CVE-2023-5240Improper access control in PAM propagation scripts in Devolu…7.5
• CVE-2023-52424The IEEE 802.11 standard sometimes enables an adversary to t…7.4
• CVE-2023-52425libexpat through 2.5.0 allows a denial of service (resource …7.5
• CVE-2023-52426libexpat through 2.5.0 allows recursive XML Entity Expansion…5.5
• CVE-2023-52427In OpenDDS through 3.27, there is a segmentation fault for a…7.5
• CVE-2023-52428In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can…7.5
• CVE-2023-52429dm_table_create in drivers/md/dm-table.c in the Linux kernel…5.5