AI Power: Complete AI Pack – Powered by GPT-4, CVE-2023-0405
- CVE, Research URL
- Published on
- Feb 13, 2023
- Research Description
- The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.
- Affected versions
-
Min -, max 1.7.40.
- Status
-
vulnerable