Wisdmlabs
8 CVEs across 5 Wisdmlabs products. Browse Wisdmlabs vulnerabilities, severities, and proof-of-concept exploits.
Wisdmlabs products with known CVEs
Wisdmlabs CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-24570 | Medium | 5.4 | 2026-01-23 | Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2025-13887 | Medium | 6.4 | 2026-01-07 | The AI BotKit – AI Chatbot & Live Support for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in the `ai_bot… |
CVE-2025-24593 | High | 7.1 | 2025-01-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Reflected… |
CVE-2024-49311 | Medium | 6.5 | 2024-10-17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Stored XSS… |
CVE-2024-49312 | Medium | 4.9 | 2024-10-17 | Server-Side Request Forgery (SSRF) vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge.This issue affects Edwiser Bridge: from n/a through <= 3.0.7. |
CVE-2024-3964 | Medium | 5.9 | 2024-07-13 | The Product Enquiry for WooCommerce WordPress plugin before 3.1.8 does not sanitise and escape some of its settings, which could allow high privilege users suc… |
CVE-2024-4186 | Critical | 9.8 | 2024-05-07 | The Edwiser Bridge plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.5. This is due to the 'eb_user_email_verif… |
CVE-2024-31260 | High | 7.6 | 2024-04-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridg… |
CVE-2021-4399 | Medium | 4.3 | 2023-07-01 | The Edwiser Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,2.0.6. This is due to missing or incorrect… |