CVE-2026-14185

The WPBot WordPress plugin prior to version 8.2.0 is vulnerable due to a lack of capability and nonce checks, enabling authenticated users with subscriber-level access to alter the plugin's configuration settings. This could lead to unauthorized changes that may compromise the integrity of the website. WordPress site administrators using the affected plugin should prioritize updating to version 8.2.0 or later to mitigate this risk.