CVE-2024-6846medium

CVE-2024-6846: falha de média gravidade em Chatbot with ChatGPT WordPress

SmartSearchWP <= 2.4.4 - Unauthenticated Log Purge

Publicada em · Atualizada em

28Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendcvss 5.3epss 1.3%
probabilidade de exploração
1.3%top 31% das CVEs
exploração observada
nãonenhuma fonte reporta
The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an unauthenticated user to purge error and chat logs
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
Unknown · Chatbot with ChatGPT WordPress
CVEs relacionadas — Chatbot with ChatGPT WordPress

No mesmo produto, das mais perigosas para as menos.

CVE-2024-6845MEDIUMSmartSearchWP < 2.4.6 - Unauthenticated OpenAI Key DisclosureEPSS 1.1%CVE-2024-6847CRITICALSmartSearch WP <= 2.4.4 - Unauthenticated SQLiEPSS 0.7%CVE-2024-6843MEDIUMSmartSearch WP <= 2.4.4 - Unauthenticated Stored XSSEPSS 0.4%
Referências
https://wpscan.com/vulnerability/d48fdab3-669c-4870-a2f9-6c39a7c25fd8/