https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:38:06 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89093 <p><strong>Affected:</strong> wordplus Better Messages – Chat Rooms, Group Chat, Private Messages &amp; AI Chat Bots</p> <p>The Better Messages – Chat Rooms, Group Chat, Private Messages &amp; AI Chat Bots plugin for WordPress is vulnerable to Information Exposure by Spoofing in all versions up to, and including, 2.15.33. This is due to the `is_ai_bot_user()` function identifying privileged internal AI bot accounts by performing a prefix check for `&#39;ai-chat-bot-&#39;` against a guest record&#39;s stored IP address, which is populated verbatim from the client-controlled `X-Real-IP` request header during unauthenticated guest registration. This makes it possible for unauthenticated attackers to register a guest identity that the plugin treats as its own internal AI bot, bypassing the per-room role allowlist, draft-status check, and join filters — which are all short-circuited by the bot check in `user_can_join()` and `user_can_read()` — to join administrator-restricted chat rooms, post messages into them, and read the private message history of other users.</p> <p><strong>Affected:</strong> wordplus Better Messages – Chat Rooms, Group Chat, Private Messages &amp; AI Chat Bots</p> <p>The Better Messages – Chat Rooms, Group Chat, Private Messages &amp; AI Chat Bots plugin for WordPress is vulnerable to Information Exposure by Spoofing in all versions up to, and including, 2.15.33. This is due to the `is_ai_bot_user()` function identifying privileged internal AI bot accounts by performing a prefix check for `&#39;ai-chat-bot-&#39;` against a guest record&#39;s stored IP address, which is populated verbatim from the client-controlled `X-Real-IP` request header during unauthenticated guest registration. This makes it possible for unauthenticated attackers to register a guest identity that the plugin treats as its own internal AI bot, bypassing the per-room role allowlist, draft-status check, and join filters — which are all short-circuited by the bot check in `user_can_join()` and `user_can_read()` — to join administrator-restricted chat rooms, post messages into them, and read the private message history of other users.</p> https://vulnerability.circl.lu/vuln/cve-2026-89093