Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/11/27 9:27 a.m.18 views

CVE-2025-13381 AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Missing Authorization to Unauthenticated Media File Uploads

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'ayschatgptsavewpmedia' function in all versions up to, and including, 2.7.0. This makes it possible for unauthenticated attackers to upload...

5.3CVSS0.00278EPSS
SaveExploits0References6
Rows per page
Query Builder