The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress contains an authorization flaw in its ajax_rag_manual_sync() AJAX handler. The flaw allows any user with a subscriber role or higher to trigger an arbitrary re‑embedding of stored RAG documents. When executed, the attacker modifies the rag_documents database table and forces the site owner to consume third‑party AI service credits such as OpenAI, Gemini, OpenRouter, or xAI, thereby draining paid resources.

WordPress sites that have the WPBot plugin version 8.5.6 or earlier, all iterations of the plugin made by quantumcloud. The vulnerability exists regardless of the WordPress core version and affects users with subscriber-level or higher access.

The CVSS score of 4.3 indicates moderate severity, and the EPSS score of < 1 % suggests a low probability of exploitation at this time. The likely attack vector is an authenticated user sending a crafted AJAX request to the ajax_rag_manual_sync endpoint, which the plugin does not protect by validating the user’s capabilities. Because the plugin performs the re‑embedding without authorization checks, any subscriber or higher role can exploit the flaw to consume AI credits and potentially exhaust the site owner’s budget, impacting availability of those services.