The WoowBot plugin has an authorization bypass that lets any authenticated user with subscriber‑level access trigger RAG document sync operations. Each sync initiates paid embedding calls to services such as OpenAI, Gemini, OpenRouter, or xAI using the site administrator's stored API key, potentially draining the site’s AI credits and incurring unexpected charges. The vulnerability does not expose other data or provide additional system compromise, but the financial impact can be significant for the administrator.

QuantumCloud AI ChatBot for WooCommerce – WoowBot is affected in all releases up to and including version 5.0.0. The flaw stems from the qcld_rag_manual_sync AJAX action and the way the wp_chatbot nonce is emitted to every authenticated front‑end visitor via wp_localize_script.

The CVSS base score is 4.3, indicating moderate risk. EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog. Attackers can exploit the issue through the publicly reachable AJAX endpoint with only subscriber‑level credentials, which lowers the barrier to exploitation but the overall likelihood remains modest given the limited impact beyond financial loss.