What is GHSA-gm98-p9q7-cg6p?

GHSA-gm98-p9q7-cg6p is a security advisory published by GitHub Security Advisories with High severity. The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of...

Which CVE IDs does GHSA-gm98-p9q7-cg6p cover?

GHSA-gm98-p9q7-cg6p covers the following CVE IDs: CVE-2026-15048. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gm98-p9q7-cg6p?

GHSA-gm98-p9q7-cg6p has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-gm98-p9q7-cg6pHighCVSS 7.5

The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of...

Vendor

GitHub Security Advisories

Published

July 31, 2026

Last Modified

July 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-15048 →

📋 Description

The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of its AJAX actions, allowing unauthenticated users to retrieve chat-history session metadata including WordPress usernames, user IDs, and timestamps.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-15048
https://wpscan.com/vulnerability/881d1548-e6c3-4093-ab8c-dc3a9fcccc34
https://github.com/advisories/GHSA-gm98-p9q7-cg6p