Aller au contenu
Se connecter
4.3 Moyenne

CVE-2025-12360 The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due to…

Description

The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to unauthorized API usage due to a missing capability check on the rtafar_ajax() function in all versions up to, and including, 1.7.7. This makes it possible for authenticated attackers, with Subscriber-level access, to trigger OpenAI API key usage resulting in quota consumption potentially incurring cost.

Produits et versions touchés

Produit Versions touchées Corrigé en
Better Find and Replace – AI-Powered Suggestions 1.7 premières → 1.7.7 Pas de correctif indiqué

Autres CVE de Better Find and Replace – AI-Powered Suggestions

Les 3 CVE de Better Find and Replace – AI-Powered Suggestions →
CVE-2026-3369 The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Stored Cross-Site Scripting… 5.4 Moyenne CVE-2025-9334 The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Limited Code Injection in all… 8.8 Élevée
Suivre cette CVE