CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through <= 2.7.4.
Explanation of Vulnerability in Simple Terms
The AI ChatBot with ChatGPT and Content Generator plugin for WordPress versions 2.7.4 and earlier lacks proper authorization checks. An attacker can modify data without authentication, such as altering chatbot settings or content. No user interaction is required. Site administrators should update to a version newer than 2.7.4 as soon as available.
What an attacker can do
Modify chatbot settings and content without logging in.
Potential impact on your site
Attackers can alter your chatbot responses, settings, or generated content without permission.
Conditions required to exploit
Network access to the site; no authentication required.
Key dates
External resources
Related vulnerabilities
