← Back

CVE-2024-7713

nvd nist
Published: Sep 27, 2024Modified: Mar 18, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 discloses the Open AI API Key, allowing unauthenticated users to obtain it

Affected (1)

Ays Pro
1 product
Chatgpt Assistant
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Chatgpt Assistant
Before 2.1.0

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (1)

Source: contact@wpscan.com
Third Party Advisory

Timeline

No history available yet.