https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 09:10:52 +0000 https://cve.radiocsirt.org/vuln/cve-2026-5294 <p><strong>Affected:</strong> ahmadgb GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen &amp; Zero-Prompt Content</p> <p>The Geeky Bot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.2.2. This is due to a nopriv AJAX route allowing attacker-controlled model/function dispatch and reaching a plugin installer helper that downloads and unzips attacker-supplied ZIP files into wp-content/plugins/. This makes it possible for unauthenticated attackers to perform arbitrary plugin installation and achieve remote code execution.</p> <p><strong>Affected:</strong> ahmadgb GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen &amp; Zero-Prompt Content</p> <p>The Geeky Bot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.2.2. This is due to a nopriv AJAX route allowing attacker-controlled model/function dispatch and reaching a plugin installer helper that downloads and unzips attacker-supplied ZIP files into wp-content/plugins/. This makes it possible for unauthenticated attackers to perform arbitrary plugin installation and achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/cve-2026-5294