Themeisle Ai Chatbot For WordPress – Hyve Lite vulnerabilities

2 CVEs affecting Themeisle Ai Chatbot For WordPress – Hyve Lite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-97305, published 2026-10-05.

More from Themeisle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-24666, published 2025-01-24. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Stored XSS.This issue affects AI…
• CVE-2026-97305, published 2026-10-05. Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days. Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This…