5.4
Medium
CVE-2023-0405 The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin…
Description
The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training 1.4 | earliest → < 1.4.38 | 1.4.38 |