AI ChatBot, 4103ae01c1fa179d8e08007d2c877fd692d165df
- CVE, Research URL
- Home page URL
- Application
- Published on
- Mar 29, 2023
- Research Description
- WPBot – AI ChatBot for Live Support, Lead Generation, AI Services [chatbot] < 4.4.8 AI ChatBot <= 4.4.7 - Missing Authorization on openai_settings_option_callback The AI ChatBot plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the openai_settings_option_callback function in versions up to, and including, 4.4.7. This makes it possible for subscriber-level attackers to change plugin settings.
- Affected versions
-
max 4.4.8.
- Status
-
vulnerable