CVE-2026-1336

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-1336", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2026-01-22T12:43:02.635Z", "datePublished": "2026-03-02T23:22:55.141Z", "dateUpdated": "2026-04-08T16:53:09.571Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:53:09.571Z"}, "affected": [{"vendor": "ays-pro", "product": "AI ChatBot with ChatGPT and Content Generator by AYS", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.7.5", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the store_data() and get_chatgpt_api_key() functions in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to view, modify or delete the plugin's ChatGPT API key.\r\nThe vulnerability was partially fixed in version 2.7.5 and fully fixed in version 2.7.6"}], "title": "AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/53b3d441-4938-435f-85c3-707477f0293d?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/ays-chatgpt-assistant/tags/2.7.4/includes/chatgpt-assistant-db-actions/class-chatgpt-assistant-db-actions.php#L23"}, {"url": "https://plugins.trac.wordpress.org/browser/ays-chatgpt-assistant/tags/2.7.4/admin/class-chatgpt-assistant-admin.php#L4060"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Nabil Irawan"}], "timeline": [{"time": "2026-01-09T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2026-01-22T12:58:26.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2026-03-02T11:22:35.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-03T01:52:50.319404Z", "id": "CVE-2026-1336", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-03T01:53:02.345Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-1336", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-03T01:52:50.319404Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-03T01:52:58.400Z"}}], "cna": {"title": "AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification", "credits": [{"lang": "en", "type": "finder", "value": "Nabil Irawan"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "ays-pro", "product": "AI ChatBot with ChatGPT and Content Generator by AYS", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "2.7.5"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-01-09T00:00:00.000Z", "value": "Discovered"}, {"lang": "en", "time": "2026-01-22T12:58:26.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2026-03-02T11:22:35.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/53b3d441-4938-435f-85c3-707477f0293d?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/ays-chatgpt-assistant/tags/2.7.4/includes/chatgpt-assistant-db-actions/class-chatgpt-assistant-db-actions.php#L23"}, {"url": "https://plugins.trac.wordpress.org/browser/ays-chatgpt-assistant/tags/2.7.4/admin/class-chatgpt-assistant-admin.php#L4060"}], "descriptions": [{"lang": "en", "value": "The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the store_data() and get_chatgpt_api_key() functions in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to view, modify or delete the plugin's ChatGPT API key.\r\nThe vulnerability was partially fixed in version 2.7.5 and fully fixed in version 2.7.6"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-03-02T23:22:55.141Z"}}}, "cveMetadata": {"cveId": "CVE-2026-1336", "state": "PUBLISHED", "dateUpdated": "2026-03-03T01:53:02.345Z", "dateReserved": "2026-01-22T12:43:02.635Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-03-02T23:22:55.141Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "AI ChatBot with ChatGPT and Content Generator by AYS", "vendor": "ays-pro", "versions": [{"lessThanOrEqual": "2.7.5", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the store_data() and get_chatgpt_api_key() functions in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to view, modify or delete the plugin's ChatGPT API key.\r\nThe vulnerability was partially fixed in version 2.7.5 and fully fixed in version 2.7.6"}, {"lang": "es", "value": "El plugin AI ChatBot con ChatGPT and Content Generator by AYS para WordPress es vulnerable a acceso no autorizado y modificaci\u00f3n de datos debido a la falta de comprobaciones de capacidad en las funciones store_data() y get_chatgpt_api_key() en todas las versiones hasta la 2.7.5, inclusive. Esto hace posible que atacantes no autenticados vean, modifiquen o eliminen la clave API de ChatGPT del plugin.\nLa vulnerabilidad fue corregida parcialmente en la versi\u00f3n 2.7.5 y corregida completamente en la versi\u00f3n 2.7.6."}], "id": "CVE-2026-1336", "lastModified": "2026-06-17T10:15:37.537", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1336", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-03T01:52:50.319404Z", "version": "2.0.3"}}]}, "published": "2026-03-03T00:15:54.923", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/ays-chatgpt-assistant/tags/2.7.4/admin/class-chatgpt-assistant-admin.php#L4060"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/ays-chatgpt-assistant/tags/2.7.4/includes/chatgpt-assistant-db-actions/class-chatgpt-assistant-db-actions.php#L23"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/53b3d441-4938-435f-85c3-707477f0293d?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.7.5]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "AI ChatBot with ChatGPT and Content Generator by AYS", "source": "cna", "vendor": "ays-pro"}, "product": "ai_chatbot_with_chatgpt_and_content_generator_by_ays", "vendor": "ays_pro"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-04-15T17:59:34.434268+00:00", "value": {"mitigation_remediation": ["Upgrade the plugin to version 2.7.6 or later where the authorization checks are correctly implemented. ", "If an upgrade cannot be performed immediately, temporarily restrict access to the plugin\u2019s REST/API endpoints by configuring WordPress to allow only administrators or by blocking the endpoints with server rules. ", "After the update, delete any existing API keys that may have been exposed and verify that only authorized users can modify them."], "summary": {"action": "Update Plugin", "impact": "Unauthorized modification of the plugin\u2019s ChatGPT API key by unauthenticated users"}, "threat_synthesis": {"affected_systems": "All installations of the AI ChatBot with ChatGPT and Content Generator by AYS for WordPress, specifically versions up to and including 2.7.5. Users running 2.7.5 are partially protected, but the issue remains until version 2.7.6 where the fix is complete.", "description_and_impact": "The vulnerability arises from missing capability checks in the plugin\u2019s store_data() and get_chatgpt_api_key() functions. Because these functions can be invoked without authentication, any party can view, modify, or delete the stored ChatGPT API key. This exposes the site owner\u2019s secret credentials and gives the attacker the ability to hijack or deny the plugin\u2019s ChatGPT functionality. The impact is data compromise and potential remote service abuse through the exposed API key.", "risk_and_exploitability": "The CVSS score of 5.3 indicates moderate severity. The EPSS score of less than 1% suggests a low likelihood of exploitation at present, and the vulnerability is not yet in the CISA KEV catalog. However, the flaw can be exploited via unauthenticated HTTP requests to the plugin\u2019s API endpoints, a vector that is simple and requires no special credentials. Even though the potential impact is limited to API key disclosure, the compromised key can be used for services that may carry monetary costs or privacy risks."}}}}, "created": "2026-03-03T08:40:52.095469+00:00", "updated": "2026-04-15T18:00:15.515724+00:00", "vendors": ["ays_pro", "ays_pro$PRODUCT$ai_chatbot_with_chatgpt_and_content_generator_by_ays", "wordpress", "wordpress$PRODUCT$wordpress"]}