Authentication Issue in Geeky Bot WordPress Plugin
CVE-2026-15048
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-15048?
The Geeky Bot WordPress plugin versions prior to 1.2.8 exhibit a serious flaw by failing to properly execute an authorization check for specific AJAX actions. This oversight permits unauthenticated users to access sensitive chat-history metadata. Such unauthorized access includes retrieving crucial information such as WordPress usernames, user IDs, and timestamps, potentially posing significant risks to user privacy and data security.
Affected Version(s)
Geeky Bot 0 < 1.2.8
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.