CVE-2026-16773

Name of the Vulnerable Software and Affected Versions WPBot – AI ChatBot for Live Support, Lead Generation, AI Services versions prior to 8.6.0

Description The plugin is subject to sensitive information exposure through the wpbot send email transcript free function. Unauthenticated attackers can exfiltrate full chat transcripts and personally identifiable information (PII), such as names, email addresses, and phone numbers, from the wpbot user and wpbot conversation tables to an external email address.

Recommendations Update the plugin to a version newer than 8.5.9.