Vulnerability · Published Sep 27, 2024 · Assigned by WPScan
CVE-2024-7713AI Chatbot with ChatGPT by AYS <= 2.0.9 - Unauthenticated OpenAI Key Disclosure
High 7.5
In plain English
A high-severity security flaw in AI ChatBot with ChatGPT and Content Generator by AYS from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.3%top 76.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 discloses the Open AI API Key, allowing unauthenticated users to obtain it
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | AI ChatBot with ChatGPT and Content Generator by AYS | 0 – before 2.1.0 |
References
- https://wpscan.com/vulnerability/061eab97-4a84-4738-a1e8-ef9a1261ff73/ exploit, vdb-entry, technical-description