File and Path Handling

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_fileCVE-2023-5241quantumcloud · CVSS 9.6 · 2.6% likely

   CWE-22

2. AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_fileCVE-2023-5212quantumcloud · CVSS 9.6 · 2.0% likely

   CWE-22

3. WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File UploadCVE-2024-13091QuantumCloud · CVSS 9.8 · 0.9% likely

   CWE-434

4. WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerabilityCVE-2025-26932QuantumCloud · CVSS 7.5 · 0.8% likely

   CWE-98

5. WPBot Pro Wordpress Chatbot <= 13.6.2 - Authenticated (Subscriber+) Arbitrary File DeletionCVE-2025-3812QuantumCloud · CVSS 8.1 · 0.6% likely

   CWE-73

6. WordPress KBx Pro Ultimate plugin < 8.0.5 - Arbitrary File Deletion VulnerabilityCVE-2025-31053quantumcloud · CVSS 7.7 · 0.5% likely

   CWE-22

7. WordPress WoowBot Pro Max plugin <= 14.1.7 - Arbitrary File Upload vulnerabilityCVE-2026-57710quantumcloud · CVSS 9.9 · 0.5% likely

   CWE-434

8. WordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerabilityCVE-2025-60223QuantumCloud · CVSS 7.7 · 0.4% likely

   CWE-22

9. WordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerabilityCVE-2024-32729QuantumCloud · CVSS 7.5 · 0.4% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.