Description
WordPress Plugin GPT AI Power is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently modify arbitrary posts. WordPress Plugin GPT AI Power version 1.4.37 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.4.38 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:3CA9AC21-2BCE-4480-9079-B4045B261273
https://plugins.svn.wordpress.org/gpt3-ai-content-generator/trunk/README.txt
Related Vulnerabilities
WordPress Plugin Import and export users and customers CSV Injection (1.16.3.5)
WordPress Plugin GigPress Multiple Vulnerabilities (2.3.10)
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.19)
WordPress Plugin BuddyPress Multiple SQL Injection Vulnerabilities (1.7.1)
Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2024-25609)