Approved changes feed: RSS · Atom

cpe:2.3:a:smartsearchwp:smartsearchwp:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorSmartsearchwp (5b194a17-a8ab-55fe-a4c5-b910b7e4c3b4)
ProductSmartsearchwp (c442b3c8-9d78-5a83-983d-e70d6d7bfc85)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6845 vulnerable 2026-06-08 06:58:20.588480 SmartSearchWP < 2.4.6 - Unauthenticated OpenAI Key Disclosure
The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, thereby leaking the OpenAI API key
Published: 2024-09-25T06:00:04.626Z
Updated: 2024-09-25T13:43:40.694Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.