Executive brief
WPBot is a WordPress plugin that provides AI-powered customer support and lead generation. A security flaw allows logged-in users with low-level permissions to trigger the re-processing of AI documents. This can lead to the unauthorized consumption of the site owner's paid AI API credits (such as OpenAI or Gemini) and unintended modifications to the chatbot's knowledge base.
Technical details
The WPBot plugin for WordPress fails to perform adequate authorization checks on certain actions related to Retrieval-Augmented Generation (RAG) document management. Specifically, the vulnerability exists in the handling of document re-embedding processes within the `class-qcld-bot-rag.php` and `qcld-wpwbot.php` files. An authenticated attacker with subscriber-level privileges or higher can send crafted requests to trigger the re-embedding of stored documents. This action modifies the `rag_documents` database table and forces the system to make external API calls to third-party providers like OpenAI, Gemini, OpenRouter, or xAI, leading to resource exhaustion of the site owner's paid API credits. The issue is classified as CWE-862 (Missing Authorization).
Affected products
- QuantumCloud WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 8.5.6
Timeline
- 2026-07-16: disclosed
- 2026-07-16: advisory
References
- https://plugins.trac.wordpress.org/browser/chatbot/tags/8.4.9/includes/class-qcld-bot-rag.php
- https://plugins.trac.wordpress.org/browser/chatbot/tags/8.4.9/includes/class-qcld-bot-rag.php
- https://plugins.trac.wordpress.org/browser/chatbot/tags/8.4.9/qcld-wpwbot.php
- https://plugins.trac.wordpress.org/browser/chatbot/tags/8.5.5/includes/class-qcld-bot-rag.php
- https://plugins.trac.wordpress.org/browser/chatbot/tags/8.5.5/includes/class-qcld-bot-rag.php
- https://plugins.trac.wordpress.org/browser/chatbot/tags/8.5.5/qcld-wpwbot.php
- https://plugins.trac.wordpress.org/changeset?reponame=&old=3608558%40chatbot&new=3608558%40chatbot