CVE-2024-7714
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Sep 27, 2024
Updated: Oct 7, 2024
Summary
CVE-2024-7714 is a vulnerability affecting the AI ChatBot with ChatGPT and Content Generator plugin by AYS for WordPress. This issue stems from insufficient access controls which allow unauthenticated users to perform disruptive actions, specifically disconnecting the plugin from OpenAI. Affected actions include 'ays_chatgpt_disconnect', 'ays_chatgpt_connect', and 'ays_chatgpt_save_feedback'. Successful exploitation of this vulnerability can result in the disabling of the AI ChatBot and Content Generator functionality.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.