The exploited vulnerability resides in the AI ChatBot for WooCommerce plugin, where one AJAX action lacks both authorization and nonce verification. As a result, anyone on the internet can trigger this action and make the plugin send requests through the site owner's third‑party Gemini API key, incurring costs on the owner’s account. If an optional feature is enabled, the attacker can also pull content from the plugin’s indexed knowledge‑base, giving them access to proprietary information. This combination creates clear risks of financial abuse and data exposure for the website owner.

Any WordPress site running the AI ChatBot for WooCommerce plugin version earlier than 4.8.4 is affected. The vulnerability is specifically tied to the "qcld_gemini_response" AJAX action within this plugin. No other vendors or products are listed in the CNA data, so the impact is confined to this single WordPress plugin implementation.

The CVSS score is 7.5, indicating high severity, but the EPSS score of less than 1% indicates a low current exploitation probability. The vulnerability is not present in the CISA KEV catalog. Attackers can freely invoke the vulnerable AJAX endpoint because no authentication or nonce is required, meaning the attack can originate from any web source and does not need privileged access to the site. Once executed, the plugin will forward the request to the Gemini service under the site owner's billing, and when the optional feature is active, the attacker can read sensitive knowledge‑base data.