{"data":{"id":"0364471d-3e91-4352-8d36-b9f928c5fa79","title":"CVE-2024-6846: The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an…","summary":"CVE-2024-6846 affects the Chatbot with ChatGPT WordPress plugin before 2.4.5. Some REST routes do not validate access, so an unauthenticated user can purge error and chat logs. The NVD has not yet provided an assessment, and the weakness is classified as NVD-CWE-noinfo.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-6846","publishedAt":"2024-09-05T10:15:03.143Z","cveId":"CVE-2024-6846","cweIds":null,"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Chatbot with ChatGPT WordPress plugin"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Chatbot with ChatGPT WordPress plugin unauthenticated log purge","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01252,"epssCheckedAt":"2026-11-04T18:09:13.116Z","kevDateAdded":null,"advisoryAliases":["GHSA-x54p-439w-h3mq"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:18.839Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}