What the vulnerability does
01Description
The AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.6.5. This is due to insufficient sanitization in the 'newcodebyte_chatbot_export_messages' function. This makes it possible for unauthenticated attackers to embed untrusted input into exported CSV files, which can result in code execution when these files are downloaded and opened on a local system with a vulnerable configuration.
Explanation of Vulnerability in Simple Terms
02Summary
A user-interaction vulnerability in AI Chatbot Free Models allows an attacker to modify data on the site by tricking a user into visiting a malicious link or page. The vulnerability affects versions 1.6.5 and earlier. No authentication is required, but the victim must click a link or interact with a page controlled by the attacker. The integrity of site data can be compromised.
What an attacker can do
03Attacker Capabilities
Modify site data by tricking a user into clicking a malicious link.
Potential impact on your site
04Site Impact
Site data can be altered without authorization if users are socially engineered.
Conditions required to exploit
05Prerequisites
Victim must click an attacker-controlled link or visit a malicious page.
Key dates
06Disclosure timeline
October 24, 2025
CVE published
April 8, 2026
Record updated
