CVE-2024-7714 — AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls

Description (CNA)

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 lacks sufficient access controls allowing an unauthenticated user to disconnect the AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 from OpenAI, thereby disabling the AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0. Multiple actions are accessible: 'ays_chatgpt_disconnect', 'ays_chatgpt_connect', and 'ays_chatgpt_save_feedback'

Affected (CNA)

Vendor / product	Versions
Unknown / AI ChatBot with ChatGPT and Content Generator by AYS	affected 0 before 2.1.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/04447c76-a61b-4091-a510-c76fc8ca5664/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.