Unauthorized Data Modification in ArtiBot Free Chat Bot for WordPress

CVE-2024-0447

Summary

The ArtiBot Free Chat Bot for WordPress is susceptible to unauthorized data modification due to a missing capability check in the artibot_update function. This vulnerability affects all versions up to and including 1.1.6, allowing authenticated attackers with subscriber-level access or higher to modify plugin settings without proper permissions. It is crucial for site administrators to update the plugin and review user permissions to mitigate potential exploitation risks.

References