{"data":{"id":"640a7ffc-b6fa-43d6-8519-b74484f419dd","title":"CVE-2024-7714: The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 lacks sufficient access controls…","summary":"CVE-2024-7714 affects the AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0. The plugin lacks sufficient access controls, so an unauthenticated user can disconnect it from OpenAI through the actions 'ays_chatgpt_disconnect', 'ays_chatgpt_connect', and 'ays_chatgpt_save_feedback', disabling the plugin. NVD has not yet provided an assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-7714","publishedAt":"2024-09-27T10:15:12.750Z","cveId":"CVE-2024-7714","cweIds":null,"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["AI ChatBot with ChatGPT and Content Generator by AYS (WordPress plugin)","ChatGPT","OpenAI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"AI ChatBot with ChatGPT and Content Generator by AYS missing access controls","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00848,"epssCheckedAt":"2026-11-04T06:10:15.563Z","kevDateAdded":null,"advisoryAliases":["GHSA-xfx4-9q4j-5v3q"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:15.930Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}