CVE-2024-6843: Webdigit Chatbot With Chatgpt

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins

Affected products

• Webdigit Chatbot With Chatgpt: before 2.4.5 (fixed in 2.4.5)

Published 2024-08-19. Last modified 2026-06-17.