Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-25338 EUVD-2026-8233GHSA-97jx-r35c-g98x

WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.7.4 - Broken Access Control vulnerability

Published Feb 19, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through <= 2.7.4.

Affected products

VendorProductAffectedFixed
Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ≤ 2.7.4 —

References