CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through <= 2.6.6.
Explanation of Vulnerability in Simple Terms
The AI ChatBot with ChatGPT and Content Generator plugin for WordPress contains an information disclosure vulnerability affecting versions up to 2.6.6. An unauthenticated attacker can read sensitive data over the network without user interaction. The vulnerability stems from improper access controls that expose confidential information. Site administrators should update to a version newer than 2.6.6 immediately.
What an attacker can do
Read sensitive data from the plugin without authentication or user interaction.
Potential impact on your site
Confidential information stored or processed by the plugin may be exposed to unauthorized parties.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
