Threat Entry Updated 2024-10-07

CVE-2024-7714 - Chatgpt Assistant Plugin

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 lacks sufficient access controls allowing an unauthenticated user to disconnect the AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 from OpenAI, thereby disabling the AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0. Multiple actions are accessible: 'ays_chatgpt_disconnect', 'ays_chatgpt_connect', and 'ays_chatgpt_save_feedback'

PLUGIN Chatgpt Assistant

CVE-2024-7714

HIGH CVSS 7.5 2024-09-27

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-03-18

CVE-2024-7713 - Chatgpt Assistant Plugin

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 discloses the Open AI API Key, allowing unauthenticated users to obtain it

PLUGIN Chatgpt Assistant

CVE-2024-7713

HIGH CVSS 7.5 2024-09-27

Risk Score

Open Full Technical Breakdown