2 matches found
CVE-2024-0453
The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openaifiledeletecallback function in all versions up to, and including, 5.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above...
7.7CVSS5.1AI score0.00363EPSS
SaveExploits0References1
CVE-2024-0453: Improper Access Control
The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openaifiledeletecallback function in all versions up to, and including, 5.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above...
7.7CVSS5.7AI score0.00363EPSS
SaveExploits0References1
20