Unauthorized Data Modification in ArtiBot Free Chat Bot for WordPress
CVE-2024-0447
5MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 13 March 2024
What is CVE-2024-0447?
The ArtiBot Free Chat Bot for WordPress is susceptible to unauthorized data modification due to a missing capability check in the artibot_update function. This vulnerability affects all versions up to and including 1.1.6, allowing authenticated attackers with subscriber-level access or higher to modify plugin settings without proper permissions. It is crucial for site administrators to update the plugin and review user permissions to mitigate potential exploitation risks.
Affected Version(s)
ArtiBot Free Chat Bot for WordPress WebSites * <= 1.1.6