CVE-2024-6845

CVE-2024-6845 affects SmartSearchWP (Chatbot with ChatGPT WordPress plugin)

CVE-2024-6846

The Chatbot with ChatGPT WordPress plugin (also identified as SmartSearchWP ) versions prior to 2.4.5 contains a vulnerability due to improper access controls in the REST Route Handler . Specifically, the plugin fails to validate access on certain REST routes, which allows an unauthenticated user...

CVE-2024-6847

The Chatbot with ChatGPT WordPress plugin versions prior to 2.4.5 is vulnerable to an unauthenticated SQL injection (CVE-2024-6847). The root cause is the improper sanitization and escaping of a parameter used within a SQL statement when users submit messages to the chatbot. This vulnerability al...

CVE-2024-6843

The SmartSearch WP WordPress plugin (versions