CVE-2024-6846

State: PUBLISHED · Published: 2024-09-05 · Updated: 2025-08-27 · Assigner: WPScan

Description

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an unauthenticated user to purge error and chat logs

CWE

(none)

Affected

Unknown / Chatbot with ChatGPT WordPress — v=0 <2.4.5 [affected]

CVSS

(none)

References

https://wpscan.com/vulnerability/d48fdab3-669c-4870-a2f9-6c39a7c25fd8/ exploit, vdb-entry, technical-description

Source

cvelistV5-main/cves/2024/6xxx/CVE-2024-6846.json