CVE-2024-6846

SmartSearchWP <= 2.4.4 - Unauthenticated Log Purge PUBLISHED

Description (CNA)

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an unauthenticated user to purge error and chat logs

Affected (CNA)

Vendor / product	Versions
Unknown / Chatbot with ChatGPT WordPress	affected 0 before 2.4.5

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/d48fdab3-669c-4870-a2f9-6c39a7c25fd8/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.