{"data":{"id":"b991e5e2-2337-47db-81b9-73f88158679d","title":"CVE-2024-13816: The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress…","summary":"The Aiomatic plugin for WordPress, in all versions up to and including 2.3.6, lacks capability checks on multiple functions. Authenticated attackers with Subscriber-level access or higher can update and delete posts, list and delete batches, list assistant uploaded files, delete personas, forms and templates, and clear logs. The flaw was partially patched in version 2.3.5.","solution":"The vulnerability was partially patched in version 2.3.5.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-13816","publishedAt":"2025-03-08T14:15:31.077Z","cveId":"CVE-2024-13816","cweIds":["CWE-862","CWE-862"],"cvssScore":"5.4","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Aiomatic","WordPress","GPT-3","GPT-4","ChatGPT","ChatBot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Aiomatic WordPress plugin missing capability checks allow data deletion","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00238,"epssCheckedAt":"2026-11-04T12:08:35.508Z","kevDateAdded":null,"advisoryAliases":["GHSA-fxrj-98xj-j69p"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:51.072Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}