Wisdmlabs

9 CVEs across 5 Wisdmlabs products. Browse Wisdmlabs vulnerabilities, severities, and proof-of-concept exploits.

Wisdmlabs products with known CVEs

ProductCVEs
Edwiser Bridge5
Edwiser Bridge2
Edwiser Bridge – WordPress Moodle Integration2
Ai Chatbot For WordPress By Ai Botkit – Live In 2 Minutes, No Code1
Product Enquiry For Woocommerce1
Wisdmlabs CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-24570Medium5.42026-01-23Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…
CVE-2025-13887Medium6.42026-01-07The AI BotKit – AI Chatbot & Live Support for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in the `ai_bot…
CVE-2025-24593High7.12025-01-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Reflected…
CVE-2024-49311Medium6.52024-10-17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Stored XSS…
CVE-2024-49312Medium4.92024-10-17Server-Side Request Forgery (SSRF) vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge.This issue affects Edwiser Bridge: from n/a through <= 3.0.7.
CVE-2024-3964Medium5.92024-07-13The Product Enquiry for WooCommerce WordPress plugin before 3.1.8 does not sanitise and escape some of its settings, which could allow high privilege users suc…
CVE-2024-4186Critical9.82024-05-07The Edwiser Bridge plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.5. This is due to the 'eb_user_email_verif…
CVE-2024-31260High7.62024-04-07Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridg…
CVE-2021-4399Medium4.32023-07-01The Edwiser Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,2.0.6. This is due to missing or incorrect…