Extension WordPress

Vulnérabilités AI ChatBot with ChatGPT and Content Generator by AYS

Cette page rassemble les failles publiées pour AI ChatBot with ChatGPT and Content Generator by AYS, leurs plages de versions affectées et les correctifs signalés dans la base locale.

7Vulnérabilités
0Critiques
7Avec correctif
7,5CVSS maximal

Historique de sécurité

CVE et vulnérabilités de AI ChatBot with ChatGPT and Content Generator by AYS

7 fiches

CVE-2026-1336 Moyenne · 5,3
AI ChatBot with ChatGPT and Content Generator by AYS

AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 – Missing Authorization to Unauthenticated API Key Modification

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the store_data() and get_chatgpt_api_key() functions in all versions up to,…

Versions affectées

*-2.7.5

Correctif

2.7.6

Publication

02/03/2026

CVE-2025-13378 Moyenne · 6,5
AI ChatBot with ChatGPT and Content Generator by AYS

AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 – Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.0 via the ays_chatgpt_pinecone_upsert function. This makes it possible for unauthenticated attackers…

Versions affectées

*-2.7.0

Correctif

2.7.1

Publication

26/11/2025

CVE-2025-13381 Moyenne · 5,3
AI ChatBot with ChatGPT and Content Generator by AYS

AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 – Missing Authorization to Unauthenticated Media File Uploads

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'ays_chatgpt_save_wp_media' function in all versions up to, and including, 2.7.0. This makes…

Versions affectées

*-2.7.0

Correctif

2.7.1

Publication

26/11/2025

CVE-2025-62039 Élevée · 7,5
AI ChatBot with ChatGPT and Content Generator by AYS

AI ChatBot with ChatGPT and Content Generator by AYS <= 2.6.6 – Unauthenticated Information Exposure

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.6. This makes it possible for unauthenticated attackers to extract sensitive user…

Versions affectées

*-2.6.6

Correctif

2.6.7

Publication

11/10/2025

CVE-2024-7713 Moyenne · 5,3
AI ChatBot with ChatGPT and Content Generator by AYS

AI ChatBot with ChatGPT and Content Generator by AYS <= 2.0.9 – Unauthenticated OpenAI Key Exposure

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.9 via the ays_chatgpt_admin_ajax AJAX action. This makes it possible for unauthenticated…

Versions affectées

*-2.0.9

Correctif

2.1.0

Publication

05/09/2024

CVE-2024-7714 Moyenne · 5,3
AI ChatBot with ChatGPT and Content Generator by AYS

AI ChatBot with ChatGPT and Content Generator by AYS <= 2.0.9 – Missing Authorization

The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions like 'ays_chatgpt_disconnect' hooked via an AJAX action ays_chatgpt_admin_ajax in versions up…

Versions affectées

*-2.0.9

Correctif

2.1.0

Publication

05/09/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités