blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2024-6846

MEDIUM 5.3 CVSS 3.1
Published
September 5, 2024
Last modified
June 17, 2026
NVD status
Analyzed
Reported by
contact@wpscan.com
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an unauthenticated user to purge error and chat logs

Affected products and versions

  • Unknown Chatbot with ChatGPT WordPress — Before 2.4.5
  • smartsearchwp chatbot_with_chatgpt_wordpress — Before 2.4.5
  • webdigit chatbot_with_chatgpt — Before 2.4.5

References

  • wpscan.com https://wpscan.com/vulnerability/d48fdab3-669c-4870-a2f9-6c39a7c25fd8/ Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record