Skip to content
OpenAdvisories

Vendor

WisdmLabs

10 known vulnerabilities.

Products

Edwiser Bridge 7 Edwiser Bridge – WordPress Moodle Integration 2 AI ChatBot for WordPress by AI BotKit – Live in 2 Minutes, No Code 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-24570

    WordPress Edwiser Bridge plugin <= 4.3.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through <= 4.3.2.

    WisdmLabs Edwiser Bridge
  • Medium 6.4
    CVE-2025-13887

    AI BotKit <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The AI BotKit – AI Chatbot & Live Support for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in the `ai_botkit_widget` shortcode in all versions up to, and including, 1.1.7 due to insufficient input sanitiza…

    WisdmLabs AI ChatBot for WordPress by AI BotKit – Live in 2 Minutes, No Code Web / CMS
  • Medium 6.5
    CVE-2024-49311

    WordPress Edwiser Bridge plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Stored XSS.This issue affects Edwiser Bridge: from n/a through <= 3.0.7.

    WisdmLabs Edwiser Bridge
  • Medium 4.9
    CVE-2024-49312

    WordPress Edwiser Bridge plugin <= 3.0.7 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge.This issue affects Edwiser Bridge: from n/a through <= 3.0.7.

    WisdmLabs Edwiser Bridge
  • Medium 4.3
    CVE-2021-4399

    Edwiser Bridge <= 2.0.6 - Cross-Site Request Forgery Bypass

    The Edwiser Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,2.0.6. This is due to missing or incorrect nonce validation on the user_data_synchronization_initiater(), course_synchronization_initiater(), …

    WisdmLabs Edwiser Bridge – WordPress Moodle Integration Web / CMS