Skip to content
OpenAdvisories

Vendor

cliengo

4 known vulnerabilities.

Products

Cliengo – Chatbot 4
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-69388

    WordPress Cliengo – Chatbot plugin <= 3.0.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in cliengo Cliengo – Chatbot cliengo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cliengo – Chatbot: from n/a through <= 3.0.4.

    cliengo Cliengo – Chatbot
  • Medium 6.5
    CVE-2024-5992

    Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Unauthenticated Chatbot Settings Update

    The Cliengo – Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_chatbot_token' and 'update_chatbot_position' functions in all versions up to, and including, 3.0.2. This makes it po…

    cliengo Cliengo – Chatbot Web / CMS
  • Medium 5.4
    CVE-2024-5993

    Cliengo - Chatbot <= 3.0.2 - Missing Authorization to Authorized (Subscriber+) Chatbot Settings Update

    The Cliengo – Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'update_session' function in all versions up to, and including, 3.0.2. This makes it possible for authenticated attackers, w…

    cliengo Cliengo – Chatbot Web / CMS
  • Medium 5.4
    CVE-2024-37923

    WordPress Cliengo – Chatbot plugin <= 3.0.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in cliengo Cliengo – Chatbot cliengo allows Cross Site Request Forgery.This issue affects Cliengo – Chatbot: from n/a through <= 3.0.4.

    cliengo Cliengo – Chatbot