CVE-2023-5254

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The ChatBot plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.8.9 via the qcld_wb_chatbot_check_user function. This can allow unauthenticated attackers to extract sensitive data including confirmation as to whether a user name exists on the site as well as order information for existing users.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Oct 19, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-525407.5Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availabilitCVE-2023-525417.5Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidCVE-2023-525426.5Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-525436.2Permission verification vulnerability in the system module. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-525444.3Vulnerability of file path verification being bypassed in the email module. Impact: Successful exploitation of this vulnerability may affectCVE-2023-525457.5Vulnerability of undefined permissions in the Calendar app. Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-525467.5Vulnerability of package name verification being bypassed in the Calendar app. Impact: Successful exploitation of this vulnerability may affCVE-2023-525477.8Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a maCVE-2023-525487.8Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leCVE-2023-525497.5Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service conCVE-2023-52557.5For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked.CVE-2023-525507.5Vulnerability of data verification errors in the kernel module. Impact: Successful exploitation of this vulnerability may affect service con
CVE-2023-5254: Medium severity, CVSS 5.3 | Vulnix