Threat Entry Updated 2025-11-25

CVE-2025-12043 - Autochat Automatic Conversation Plugin

The Autochat Automatic Conversation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_nopriv_auycht_saveCid' AJAX endpoint in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to connect and disconnect the client ID.

PLUGIN Autochat Automatic Conversation

CVE-2025-12043

MEDIUM CVSS 5.3 2025-11-25

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-05-05

CVE-2023-3041 - Autochat Automatic Conversation Plugin

The Autochat Automatic Conversation WordPress plugin through 1.1.7 does not sanitise and escape user input before outputting it back on the page, leading to a cross-site Scripting attack.

PLUGIN Autochat Automatic Conversation

CVE-2023-3041

MEDIUM CVSS 6.1 2023-07-17

Risk Score

Open Full Technical Breakdown