Export limit exceeded: 425897 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-6845

SmartSearchWP < 2.4.6 - Unauthenticated OpenAI Key Disclosure

The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, thereby leaking the OpenAI API key

CVSS 3.1 · 5.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Smartsearchwp Webdigit
Products
Chatbot With Chatgpt Wordpress Chatbot With Chatgpt
CVE-2024-6843

SmartSearch WP <= 2.4.4 - Unauthenticated Stored XSS

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Webdigit
Products
Chatbot With Chatgpt Chatbot With Chatgpt Wordpress
CVE-2024-6847

SmartSearch WP <= 2.4.4 - Unauthenticated SQLi

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when submitting messages to the chatbot.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Smartsearchwp Webdigit
Products
Chatbot With Chatgpt Wordpress Chatbot With Chatgpt