CVE-2024-6845

Summary

CVE-2024-6845 is a vulnerability affecting the Chatbot with ChatGPT WordPress plugin before version 2.4.6. This issue allows unauthenticated users to access a REST endpoint without proper authorization. Successful exploitation grants attackers the ability to retrieve an encoded OpenAI API key. Subsequently, they can decode the key, resulting in unauthorized access to the plugin's OpenAI API. This vulnerability poses a significant risk for sensitive data exposure. It is recommended that users update their plugins to the latest version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.