CVE-2025-69134: Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper <= 1.1.4 versions.
highvulnerabilityLLM-Specific
security
Summary
CVE-2025-69134 is a vulnerability in the OpenAI Chatbot for WordPress Helper plugin (version 1.1.4 and earlier) that allows attackers without authentication to delete arbitrary content from WordPress sites. The flaw stems from missing authorization checks (CWE-862, a weakness where code doesn't properly verify if a user should be allowed to perform an action).
Vulnerability Details
CVSS Score
7.5(high)
EPSS (30-day exploit probability)
EPSS: 0.0%
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
network
Attack Complexity
low
Privileges Required
none
User Interaction
none
Disclosure Date
July 2, 2026
Classification
Attack Type
Other
Attack SophisticationTrivial
Impact (CIA+S)
integrityavailability
Affected Vendors
OpenAI
Related Issues
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-69134
First tracked: July 2, 2026 at 08:09 PM
Classified by LLM (prompt v3) · confidence: 75%