PatchTheCVEwebdigit vulnerabilities
Recent CVEs affecting webdigit products. 4 tracked.
webdigit has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-09-25. Highest priority: CVE-2024-6847 (score 58/100).
- CVE-2024-6847 CRITICAL 9.8 UPGRADE The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter befor
- CVE-2024-6846 MEDIUM 5.3 UPGRADE The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing
- CVE-2024-6845 MEDIUM 5.3 UPGRADE The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper authorization in one of its REST e
- CVE-2024-6843 MEDIUM 6.1 UPGRADE The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not sanitise and escape user inputs, which could a
FAQ
How do I fix webdigit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is webdigit being exploited right now?
None of the tracked webdigit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which webdigit CVE should I patch first?
CVE-2024-6847 currently ranks highest (58/100): The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not properly sanitise and escape a parameter befor.