MediumVulnerability
CVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG sync
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-111372
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
The AI ChatBot for WooCommerce – WoowBot plugin for WordPress, in all versions up to and including 5.0.0, fails to verify that a user is authorized to perform an action. Authenticated attackers with subscriber-level access or above can repeatedly trigger RAG document sync operations, which issue paid embedding API calls to OpenAI, Gemini, OpenRouter, or xAI charged to the site administrator's stored API key. The wp_chatbot nonce needed to reach this endpoint is emitted to every authenticated frontend visitor via wp_localize_script, so any subscriber-level account can obtain it.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- HighCVE-2026-117560: ATXP Gemini CLI extension OS command injection in runAtxp() via MCP parametersSame vendor · NVD/CVE Database
- HighCVE-2026-107685: req_llm WebSocket streaming client accepts untrusted TLS certificatesSame vendor · NVD/CVE Database
- MediumCVE-2026-113459: TYPO3 OpenAI API key exposed to backend users in page sourceSame vendor · NVD/CVE Database
- MediumCVE-2026-109296: Open WebUI missing authorization lets users reach disabled model backendsSame vendor · NVD/CVE Database
- MediumCVE-2026-107430: VideoWhisper Site Manager for ChatGPT, Claude, Codex missing authorization checkSame vendor · NVD/CVE Database