Beveiligingsadvies

CVE-2025-12043

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-25 07:28:18
Laatst bijgewerkt 2026-04-08 16:34:17
Toegewezen door Wordfence
CVSS-score 5.3
Status PUBLISHED

Beschrijving

The Autochat Automatic Conversation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wp_ajax_nopriv_auycht_saveCid' AJAX endpoint in all versions up to, and including, 1.1.9. This makes it possible for unauthenticated attackers to connect and disconnect the client ID.