9.8
Critical
CVE-2024-6847 The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it…
Description
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when submitting messages to the chatbot.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Chatbot with ChatGPT WordPress 2.4 | earliest → < 2.4.5 | 2.4.5 |
| chatbot_with_chatgpt_wordpress 2.4 | earliest → < 2.4.5 | 2.4.5 |
Other CVEs of Chatbot with ChatGPT WordPress
The 4 CVEs of Chatbot with ChatGPT WordPress →
CVE-2024-6845
The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint,…
5.3
Medium
CVE-2024-6846
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an…
5.3
Medium
CVE-2024-6843
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow…
6.1
Medium