Webdigit Chatbot With Chatgpt
4 CVEs affecting Webdigit Chatbot With Chatgpt. Latest disclosed: 2024-09-25. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6847 | Critical | 9.8 | 2024-08-20 | The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL i… |
CVE-2024-6843 | Medium | 6.1 | 2024-08-19 | The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cros… |
CVE-2024-6845 | Medium | 5.3 | 2024-09-25 | The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrie… |
CVE-2024-6846 | Medium | 5.3 | 2024-09-05 | The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an unauthenticated user to purge error and ch… |