CVE-2023-5533

Summary

CVE-2023-5533 is a vulnerability affecting the AI ChatBot plugin for WordPress. In versions up to 4.8.9 and 4.9.2, this plugin lacks adequate capability checks on certain AJAX functions. Consequently, unauthenticated attackers can exploit this weakness to execute unauthorized actions, which were initially designed for privileged users. This poses a significant security risk as malicious actors can manipulate the plugin's functionality without proper authorization. WordPress users should upgrade to the latest version of the plugin or consider disabling the AI ChatBot plugin until a patch is released to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.