CVE-2024-7713

HIGH

Ays-pro Chatgpt Assistant < 2.1.0 - Cleartext Transmission

Title source: rule
STIX 2.1

Description

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 discloses the Open AI API Key, allowing unauthenticated users to obtain it

References (1)

Scores

CVSS v3 7.5
EPSS 0.0041
EPSS Percentile 61.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-319
Status published
Products (1)
ays-pro/chatgpt_assistant < 2.1.0
Published Sep 27, 2024
Tracked Since Feb 18, 2026