CVE-2026-15048

UNKNOWN 0.0

GeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat History

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to retrieve chat-history session metadata including WordPress usernames, user IDs, and timestamps.

Vendor	unknown
Product	geeky bot
Published	Jul 31, 2026

Stay Ahead of the Next One

Get instant alerts for unknown geeky bot

Be the first to know when new unknown vulnerabilities affecting unknown geeky bot are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Geeky Bot

0 < 1.2.8

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/881d1548-e6c3-4093-ab8c-dc3a9fcccc34/

Credits

md. minaruzzaman shovon WPScan