AI ChatBot with ChatGPT and Content Generator by AYS

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   AI ChatBot with ChatGPT and Content Generator by AYS

Information

Software Type Plugin
Software Slug ays-chatgpt-assistant (view on wordpress.org)
Software Status Active
Software Author ays-pro
Software Website https
Software Downloads 72,936
Software Active Installs 300
Software Record Last Updated September 15, 2026

7 Vulnerabilities

Submit a Vulnerability
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification
5.3
CVE-2026-1336
Mar 2, 2026
Researcher: Nabil Irawan
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.4 - Missing Authorization
5.3
CVE-2026-25338
Feb 8, 2026
Researcher: w41bu1
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter
6.5
CVE-2025-13378
Nov 26, 2025
Researcher: blue0x1
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Missing Authorization to Unauthenticated Media File Uploads
5.3
CVE-2025-13381
Nov 26, 2025
Researcher: blue0x1
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.6.6 - Unauthenticated Information Exposure
7.5
CVE-2025-62039
Oct 11, 2025
Researcher: n0_arafat_n0
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.0.9 - Missing Authorization
5.3
CVE-2024-7714
Sep 5, 2024
Researcher: Kieran Burge
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.0.9 - Unauthenticated OpenAI Key Exposure
5.3
CVE-2024-7713
Sep 5, 2024
Researcher: Kieran Burge
Title Status CVE ID CVSS Researchers Date
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification Patched CVE-2026-1336 5.3 Nabil Irawan March 2, 2026
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.4 - Missing Authorization Patched CVE-2026-25338 5.3 w41bu1 February 8, 2026
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Unauthenticated Server-Side Request Forgery via 'pinecone_url' Parameter Patched CVE-2025-13378 6.5 blue0x1 November 26, 2025
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.0 - Missing Authorization to Unauthenticated Media File Uploads Patched CVE-2025-13381 5.3 blue0x1 November 26, 2025
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.6.6 - Unauthenticated Information Exposure Patched CVE-2025-62039 7.5 n0_arafat_n0 October 11, 2025
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.0.9 - Missing Authorization Patched CVE-2024-7714 5.3 Kieran Burge September 5, 2024
AI ChatBot with ChatGPT and Content Generator by AYS <= 2.0.9 - Unauthenticated OpenAI Key Exposure Patched CVE-2024-7713 5.3 Kieran Burge September 5, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation