GPT AI Power Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training Plugin authorization

Summaryinfo

A vulnerability labeled as problematic has been found in GPT AI Power Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training Plugin up to 1.4.37 on WordPress. The affected element is an unknown function. The manipulation results in authorization. This vulnerability is identified as CVE-2023-0405. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in GPT AI Power Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training Plugin up to 1.4.37 on WordPress (E-Commerce Management Software). It has been classified as problematic. Affected is an unknown part. The manipulation with an unknown input leads to a authorization vulnerability. CWE is classifying the issue as CWE-862. The product does not perform an authorization check when an actor attempts to access a resource or perform an action. This is going to have an impact on integrity, and availability. CVE summarizes:

The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.

The weakness was released 02/13/2023. The advisory is shared for download at wpscan.com. This vulnerability is traded as CVE-2023-0405 since 01/19/2023. There are neither technical details nor an exploit publicly available.

Upgrading to version 1.4.38 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• E-Commerce Management Software

Name

• GPT AI Power Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training Plugin

Version

• 1.4.0
• 1.4.1
• 1.4.2
• 1.4.3
• 1.4.4
• 1.4.5
• 1.4.6
• 1.4.7
• 1.4.8
• 1.4.9
• 1.4.10
• 1.4.11
• 1.4.12
• 1.4.13
• 1.4.14
• 1.4.15
• 1.4.16
• 1.4.17
• 1.4.18
• 1.4.19
• 1.4.20
• 1.4.21
• 1.4.22
• 1.4.23
• 1.4.24
• 1.4.25
• 1.4.26
• 1.4.27
• 1.4.28
• 1.4.29
• 1.4.30
• 1.4.31
• 1.4.32
• 1.4.33
• 1.4.34
• 1.4.35
• 1.4.36
• 1.4.37

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion