Autochat Automatic Conversation
cpe:2.3:a:autochat:automatic_conversation:*:*:*:*:wordpress:*:*
- <= 1.1.9
A vulnerability exists in the Autochat Automatic Conversation plugin for WordPress, all versions through 1.1.9. The issue arises from a missing capability check on the 'wp_ajax_nopriv_auycht_saveCid' AJAX endpoint, allowing unauthorized users to modify data by connecting or disconnecting the client ID.
Exploitation of this vulnerability allows unauthenticated users to unauthorizedly modify settings by connecting or disconnecting client IDs.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.