{"id":"CVE-2023-0405","aliases":["EUVD-2023-12464","GHSA-272q-3rfm-9jxh"],"status":"published","title":"GPT3 AI Content Writer \u003c 1.4.38 - Subscriber+ Arbitrary Post Content Update","description":"The GPT AI Power: Content Writer \u0026 ChatGPT \u0026 Image Generator \u0026 WooCommerce Product Writer \u0026 AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00512,"percentile":0.44202,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2023-02-13T14:32:23Z","modified":"2026-06-17T05:25:29Z","products":[{"vendor":"gptaipower","product":"gpt_ai_power"},{"vendor":"unknown","product":"gpt ai power: content writer \u0026 chatgpt \u0026 image generator \u0026 woocommerce product writer \u0026 ai training"}],"references":[{"url":"https://wpscan.com/vulnerability/3ca9ac21-2bce-4480-9079-b4045b261273","tags":["exploit","vdb-entry","technical-description","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0405"},{"url":"https://github.com/advisories/GHSA-272q-3rfm-9jxh"}],"sources":{"cve":[{"id":"CVE-2023-0405","title":"GPT3 AI Content Writer \u003c 1.4.38 - Subscriber+ Arbitrary Post Content Update","description":"The GPT AI Power: Content Writer \u0026 ChatGPT \u0026 Image Generator \u0026 WooCommerce Product Writer \u0026 AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.","status":"published","published":"2023-02-13T14:32:23.773Z","modified":"2025-03-21T19:34:19.279Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:35:35.256261Z"}],"euvd":[{"id":"EUVD-2023-12464","description":"The GPT AI Power: Content Writer \u0026 ChatGPT \u0026 Image Generator \u0026 WooCommerce Product Writer \u0026 AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.","status":"published","published":"2023-02-13T14:32:23Z","modified":"2025-03-21T19:34:19Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:52:55.622908Z"}],"ghsa":[{"id":"GHSA-272q-3rfm-9jxh","title":"The GPT AI Power: Content Writer \u0026 ChatGPT \u0026 Image Generator \u0026 WooCommerce Product Writer \u0026 AI...","description":"The GPT AI Power: Content Writer \u0026 ChatGPT \u0026 Image Generator \u0026 WooCommerce Product Writer \u0026 AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.","status":"published","published":"2023-02-13T15:30:24Z","modified":"2023-02-23T05:07:25Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:54:13.537745Z"}],"nvd":[{"id":"CVE-2023-0405","description":"The GPT AI Power: Content Writer \u0026 ChatGPT \u0026 Image Generator \u0026 WooCommerce Product Writer \u0026 AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.","status":"published","published":"2023-02-13T15:15:22.303Z","modified":"2026-06-17T05:25:29.047Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:07:46.811196Z"}]}}