{"data":{"id":"52d7ebb7-20d3-45a5-b1ae-4f6ff798157f","title":"CVE-2024-54306: Cross-Site Request Forgery (CSRF) vulnerability in KCT AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot…","summary":"CVE-2024-54306 is a Cross-Site Request Forgery (CSRF) vulnerability, CWE-352, in the KCT AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot WordPress plugin. It affects versions from n/a through 1.6.2. The NVD has not yet provided an assessment, and the record was published on 12/13/2024 with information from Patchstack.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-54306","publishedAt":"2024-12-13T20:15:35.180Z","cveId":"CVE-2024-54306","cweIds":["CWE-352"],"cvssScore":"4.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["AIKCT Engine Chatbot","ChatGPT","Gemini","GPT-4o Best AI Chatbot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"KCT AIKCT Engine Chatbot cross-site request forgery vulnerability","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00233,"epssCheckedAt":"2026-11-04T06:10:14.827Z","kevDateAdded":null,"advisoryAliases":["GHSA-f3hq-gxw2-6xpg"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:07.725Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}