CVE-2026-109999

AI Marketing Expert chatbot names can inject scripts into the administrator dashboard

nalam-1 · AI Marketing Expert WordPress chatbot

First documented disclosure · Review checkpoint

Summary

Unauthenticated chatbot input can execute script in an administrator dashboard.

Severity and exploitation evidence

High · 7.2/10 · CVSS 3.1. Severity source.

Exploitation not established: The reviewed primary sources do not establish malicious exploitation or a confirmed victim incident.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The name field is stored without adequate sanitization and later inserted unsafely by the dashboard widget.

Conditions required

An active chatbot module with at least one configured bot; an administrator subsequently loads the dashboard.

Potential impact

Script execution in the administrator browser context.

Affected versions and configurations

All versions through 1.2.8.

Fix and mitigation status

1.2.9.

Practical next steps

Upgrade to 1.2.9 or a newer patched release; disable the chatbot module until patched.

Operating lesson

Treat chatbot identity fields as untrusted when rendering administrative views.

Evidence and limits

Wordfence’s October 27 disclosure precedes October 28 CNA ingestion. Its UI:N score does not remove the described requirement for an administrator to load the dashboard. No successful compromise is reported.

Sources