Lucene search
WpvulndbWPVDB-ID:0443D08F-4297-498A-B063-760081148E8AHistoryOct 24, 2023 - 12:00 a.m.
AI ChatBot < 4.9.1 - Subscriber+ Arbitrary File Deletion
2023-10-2400:00:00
wpscan.com
7
plugin validation server
Description The plugin does not properly validate files to be deleted in the qcld_openai_delete_training_file function, allowing users with roles as low as subscriber to delete arbitrary files on the server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 4.9.1 |
Related
prion
prion
Arbitrary file deletion
2023-10-19 06:15:00
cve
cve
CVE-2023-5212
2023-10-19 06:15:11
CVE-2023-5647
2023-10-20 02:15:08
cvelist
cvelist
CVE-2023-5212
2023-10-19 05:34:11
nvd
nvd
CVE-2023-5212
2023-10-19 06:15:11
CVE-2023-5647
2023-10-20 02:15:08
wpvulndb
wpvulndb
AI ChatBot < 4.9.3 - Subscriber+ Arbitrary File Deletion
2023-10-24 00:00:00
zdt
zdt
packetstorm
packetstorm
WordPress AI ChatBot 4.8.9 SQL Injection / Traversal / File Deletion
2023-10-26 00:00:00
wordfence
wordfence
6.2 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.8%
Related for WPVDB-ID:0443D08F-4297-498A-B063-760081148E8A