CVE-2024-7713
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Sep 27, 2024
Updated: Mar 18, 2025
CWE ID 319
Summary
CVE-2024-7713 is a vulnerability affecting the AI ChatBot plugin by AYS for WordPress before version 2.1.0. This issue discloses the Open AI API Key, making it accessible to unauthenticated users. As a result, malicious actors can exploit this flaw to gain unauthorized access and potentially misuse the API for various malicious activities. The vulnerability poses a significant risk to sites using the plugin and emphasizes the importance of keeping software up-to-date to mitigate such threats.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.