What happened
Published August 2, 2026 (unrated CVSS in NVD feed; assessed Medium). Missing authorization/nonce validation on one AJAX endpoint allows anonymous abuse of the site's connected LLM API key.
Why it matters
While blast radius is limited to a single niche WooCommerce plugin, unauthenticated abuse of a store owner's paid LLM API key enables both direct financial harm (API billing fraud) and potential disclosure of indexed knowledge-base content — a low-effort, high-frequency abuse pattern typical of AI-chatbot plugins with poor authorization hygiene.
Attack vector
An AJAX action lacks authorization and nonce checks, letting unauthenticated visitors trigger requests that use the site owner's stored third-party AI API key (e.g., OpenAI), incurring billing costs to the owner's account and, if an optional knowledge-base feature is enabled, potentially accessing indexed KB content.
Affected systems
AI ChatBot for WooCommerce WordPress plugin < 4.8.4
Mitigation
Update AI ChatBot for WooCommerce to version 4.8.4 or later.