SmartSearchWP <= 2.4.4 - Unauthenticated Log Purge
28Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 5.3epss 1.3%
exploitation probability
1.3%top 33% of all CVEs
observed exploitation
nono source reports it
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an unauthenticated user to purge error and chat logs
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Unknown · Chatbot with ChatGPT WordPress