The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_assistant() function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete GTP assistants.
Metrics
Affected Vendors & Products
References
History
Mon, 18 Nov 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Kognetiks kognetiks Chatbot
|
|
CPEs | cpe:2.3:a:kognetiks:kognetiks_chatbot:*:*:*:*:*:wordpress:*:* | |
Vendors & Products |
Kognetics
Kognetics kognetiks Chatbot |
Kognetiks kognetiks Chatbot
|
Mon, 18 Nov 2024 15:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Kognetics
Kognetics kognetiks Chatbot |
|
CPEs | cpe:2.3:a:kognetics:kognetiks_chatbot:*:*:*:*:*:wordpress:*:* | |
Vendors & Products |
Kognetics
Kognetics kognetiks Chatbot |
Wed, 13 Nov 2024 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Kognetiks
Kognetiks chatbot |
|
CPEs | cpe:2.3:a:kognetiks:chatbot:*:*:*:*:*:*:*:* | |
Vendors & Products |
Kognetiks
Kognetiks chatbot |
|
Metrics |
ssvc
|
Wed, 13 Nov 2024 02:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_assistant() function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete GTP assistants. | |
Title | Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Deletion | |
Weaknesses | CWE-862 | |
References |
|
|
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published: 2024-11-13T02:33:21.151Z
Updated: 2024-11-13T18:42:13.487Z
Reserved: 2024-10-30T11:04:18.748Z
Link: CVE-2024-10529
Vulnrichment
Updated: 2024-11-13T18:42:02.739Z
NVD
Status : Analyzed
Published: 2024-11-13T03:15:03.700
Modified: 2024-11-18T14:59:15.043
Link: CVE-2024-10529
Redhat
No data.