CVE-2024-7713

AI Chatbot with ChatGPT by AYS <= 2.0.9 - Unauthenticated OpenAI Key Disclosure

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 discloses the Open AI API Key, allowing unauthenticated users to obtain it

Affected

AI ChatBot with ChatGPT and Content Generator by AYS

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.30% chance of exploitation in the next 30 days, 22nd percentile

Published

2024-09-27

Updated

2025-08-27

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/061eab97-4a84-4738-a1e8-ef9a1261ff73/

Security advisories

• https://wpscan.com/vulnerability/061eab97-4a84-4738-a1e8-ef9a1261ff73

References

• CVE Record
• NVD entry