Autochat Automatic Conversation WordPress Plugin Missing Authorization Vulnerability

Vulnerability

A vulnerability exists in the Autochat Automatic Conversation plugin for WordPress, all versions through 1.1.9. The issue arises from a missing capability check on the 'wp_ajax_nopriv_auycht_saveCid' AJAX endpoint, allowing unauthorized users to modify data by connecting or disconnecting the client ID.

Impact

Exploitation of this vulnerability allows unauthenticated users to unauthorizedly modify settings by connecting or disconnecting client IDs.

Added: Nov 25, 2025, 8:50 AM
Updated: Nov 25, 2025, 8:50 AM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
2.5
exploitability
7.6
remediation
0.0
relevance
1.2
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.