5.3
Medium
CVE-2024-6846 The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an…
Description
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an unauthenticated user to purge error and chat logs
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Chatbot with ChatGPT WordPress 2.4 | earliest → < 2.4.5 | 2.4.5 |
| chatbot_with_chatgpt_wordpress 2.4 | earliest → < 2.4.5 | 2.4.5 |
Other CVEs of Chatbot with ChatGPT WordPress
The 4 CVEs of Chatbot with ChatGPT WordPress →
CVE-2024-6845
The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint,…
5.3
Medium
CVE-2024-6847
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it…
9.8
Critical
CVE-2024-6843
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow…
6.1
Medium