CVE-2024-6846: Webdigit Chatbot With Chatgpt

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an unauthenticated user to purge error and chat logs

Affected products

• Webdigit Chatbot With Chatgpt: before 2.4.5 (fixed in 2.4.5)

Published 2024-09-05. Last modified 2026-06-17.