Approved changes feed: RSS · Atom

cpe:2.3:a:autochat:autochat_automatic_conversation:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAutochat (d2b0938e-34d5-53f9-a0bf-aa6665d6e4aa)
ProductAutochat Automatic Conversation (c3b5d37d-e596-5640-bd91-07dfed28f800)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12043 vulnerable 2026-06-08 07:04:29.601390 Autochat Automatic Conversation <= 1.1.9 - Missing Authorization to Unauthenticated Settings Update
MEDIUM (5.3)
The Autochat Automatic Conversation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_nopriv_auycht_saveCid' AJAX endpoint in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to connect and disconnect the client ID.
Published: 2025-11-25T07:28:18.304Z
Updated: 2026-04-08T16:34:17.716Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.