Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2024-6845
Disclosure Date: September 25, 2024 (last updated October 08, 2024)
The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, thereby leaking the OpenAI API key
0
Attacker Value
Unknown
CVE-2022-40223
Disclosure Date: October 24, 2022 (last updated December 22, 2024)
Nonce token leakage and missing authorization in SearchWP premium plugin <= 4.2.5 on WordPress leading to plugin settings change.
0
Attacker Value
Unknown
CVE-2022-2535
Disclosure Date: August 15, 2022 (last updated October 08, 2023)
The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that users making a live search are limited to published posts only, allowing unauthenticated users to make a crafted query disclosing private/draft/pending post titles along with their permalink
0
