5.3
Moyenne
CVE-2024-6845 The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint,…
Description
The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, thereby leaking the OpenAI API key
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Chatbot with ChatGPT WordPress 2.4 | premières → < 2.4.6 | 2.4.6 |
| chatbot_with_chatgpt_wordpress 2.4 | premières → < 2.4.6 | 2.4.6 |
Autres CVE de Chatbot with ChatGPT WordPress
Les 4 CVE de Chatbot with ChatGPT WordPress →
CVE-2024-6846
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an…
5.3
Moyenne
CVE-2024-6847
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it…
9.8
Critique
CVE-2024-6843
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow…
6.1
Moyenne