Description
The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training | < 1.4.38 | 1.4.38 |
References
- https://wpscan.com/vulnerability/3ca9ac21-2bce-4480-9079-b4045b261273 exploit vdb-entry technical-description