CVE-2023-5204

CriticalPublic PoC

Published: 19 October 2023

Published

19 October 2023

Modified

08 April 2026

KEV Added

—

Patch

—

CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score 0.8698 99.5th percentile

Risk Priority 72 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-5204 is a critical-severity SQL Injection (CWE-89) vulnerability in Quantumcloud Wpbot. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Data from Local System (T1005); ranked in the top 0.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

This vulnerability is AI-related — categorised as Enterprise AI Assistants; in the Other ATLAS/OWASP Terms risk domain; MITRE ATLAS techniques in scope: Obtain Capabilities (AML.T0016), Exfiltration via AI Inference API (AML.T0024), External Harms (AML.T0048).

Deeper analysis

The ChatBot plugin for WordPress is vulnerable to SQL injection via the $strid parameter in versions up to and including 4.8.9. The flaw arises from insufficient escaping of user input combined with the lack of prepared statements when constructing SQL queries in qcld-wpwbot-search.php, corresponding to CWE-89.

Unauthenticated attackers can supply crafted input to append arbitrary SQL statements to existing queries. This enables extraction of sensitive database contents and carries a CVSS 3.1 score of 9.8 reflecting full impact on confidentiality, integrity, and availability.

Advisories reference a fix committed in the plugin repository that updates the affected search logic, with additional details and indicators provided by Wordfence and a public proof-of-concept archive on PacketStorm.

The associated EPSS score is 0.8698 at both current and peak values.

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2023-57535

Vulnerability details

The ChatBot plugin for WordPress is vulnerable to SQL Injection via the $strid parameter in versions up to, and including, 4.8.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.…

This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

CWE(s): CWE-89

AI Security AnalysisAI

AI Category: Enterprise AI Assistants
Risk Domain: Other ATLAS/OWASP Terms
OWASP Top 10 for LLMs 2025: None mapped
Classification Reason: The vulnerability affects the WordPress AI ChatBot plugin (explicitly named 'AI-ChatBot' in advisories), which provides chatbot functionality likely intended as an AI-powered assistant for websites, fitting the Enterprise AI Assistants category.

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1005 Data from Local System Collection

Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration.

attack.mitre.org →

T1070.004 File Deletion Stealth

Adversaries may delete files left behind by the actions of their intrusion activity.

attack.mitre.org →

T1190 Exploit Public-Facing Application Initial Access

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.

attack.mitre.org →

T1213.006 Databases Collection

Adversaries may leverage databases to mine valuable information.

attack.mitre.org →

Why these techniques?

Unauthenticated SQL injection enables database data extraction (T1213.006). Path traversal facilitates local file access (T1005). File deletion capability aids indicator removal (T1070.004). All via exploitation of public-facing WordPress plugin (T1190).