Medium severity5.4NVD Advisory· Published May 8, 2023· Updated Jun 17, 2026
CVE-2023-1651
CVE-2023-1651
Description
The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any authenticated users, such as subscriber to update them. Furthermore, due to the lack of escaping of the settings, this could also lead to Stored XSS
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <4.4.9
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.