GCVE - cpe:2.3:a:cliengo:cliengo_–_chatbot:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cliengo:cliengo_–_chatbot:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Cliengo (`5efd99ad-afa9-551b-a89a-f2d84cf78c74`)
Product	Cliengo – Chatbot (`5890b3e9-9daf-5f4f-80f5-d03e117d3e33`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-69388`	vulnerable	2026-06-08 07:43:13.544474	WordPress Cliengo – Chatbot plugin <= 3.0.4 - Broken Access Control vulnerability MEDIUM (6.5) Missing Authorization vulnerability in cliengo Cliengo – Chatbot cliengo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cliengo – Chatbot: from n/a through <= 3.0.4. Published: 2026-02-20T15:46:54.922Z Updated: 2026-04-28T20:58:26.209Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/cliengo/vulnerability/wordpress-cliengo-chatbot-plugin-3-0-4-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-5993`	vulnerable	2026-06-08 06:58:17.139598	Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Authorized (Subscriber+) Chatbot Settings Update MEDIUM (5.4) The Cliengo – Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_session' function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the session token of the chatbot. Published: 2024-07-09T08:33:01.165Z Updated: 2026-04-08T16:34:35.593Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/0a13e87d-51cd-43b0-a658-900a174738fc?source=cve https://plugins.trac.wordpress.org/changeset/3118688/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-5992`	vulnerable	2026-06-08 06:58:17.139024	Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Unauthenticated Chatbot Settings Update MEDIUM (6.5) The Cliengo – Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_chatbot_token' and 'update_chatbot_position' functions in all versions up to, and including, 3.0.2. This makes it possible for unauthenticated attackers to change chatbot settings, which can lead to unavailability or other changes to the chatbot. Published: 2024-07-09T08:33:10.073Z Updated: 2026-04-08T17:13:47.199Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/a7f0afe8-234a-4c3f-87c8-f3f23ac94fe3?source=cve https://plugins.trac.wordpress.org/changeset/3118688/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-37923`	vulnerable	2026-06-08 06:39:48.247421	WordPress Cliengo – Chatbot plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) vulnerability MEDIUM (5.4) Cross-Site Request Forgery (CSRF) vulnerability in cliengo Cliengo – Chatbot cliengo allows Cross Site Request Forgery.This issue affects Cliengo – Chatbot: from n/a through <= 3.0.4. Published: 2024-07-09T07:38:41.511Z Updated: 2026-04-28T16:10:01.690Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/cliengo/vulnerability/wordpress-cliengo-chatbot-plugin-3-0-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.