CVE-2024-7713: ays-pro chatgpt_assistant
CVSS: 7.5v3.1HighModified
Published 27-09-2024Last modified 27-08-2025
Vulnerability summary
CVE-2024-7713 is a high (CVSS 7.5) vulnerability in ays-pro chatgpt_assistant. EPSS estimates a 0.30% chance of exploitation in the next 30 days, higher than 21.8% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.5/10
010
High · v3.1 (CVE.org)EPSS score
0.30%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Timeline
- 27-09-2024PublishedVulnerability first disclosed.
- 27-08-2025Last modifiedVulnerability information updated.
Description
The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 discloses the Open AI API Key, allowing unauthenticated users to obtain it
CVSS metrics
3 scores · 3 sources · 1 versionHigh 7.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NSources3 sources · 5.3–7.5
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- wordfenceSource5.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NDiffers
EPSS trend
Probability
0.30%
Chance of exploitation in the next 30 days
Percentile
22%
Versus all other CVEs
30-day change
0.00 pp
From 0.30% on 19-09-2026
19-09-202619-10-2026
EPSS score0.30%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (wpscan.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-319Cleartext Transmission of Sensitive InformationThe product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
- CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Affected systems
Ays-pro1 product
- chatgpt_assistant< 2.1.0
Unknown1 product
Wordpress1 product
- ays-chatgpt-assistant≤ 2.0.9 (fixed in 2.1.0)
3 vendors · 3 products
References
2 links- wpscan.com/vulnerability/061eab97-4a84-4738-a1e8-ef9a1261ff73/ExploitVDB EntryTechnical DescriptionThird Party Advisory