Videowhisper Site Manager For Chatgpt Claude Codex
Monthly
Missing authorization in the WordPress plugin VideoWhisper Site Manager for ChatGPT, Claude, Codex (all versions through 1.2.10) lets an authenticated low-privilege site user reach plugin functionality that should require higher capabilities, resulting in limited confidentiality and integrity impact at CVSS 5.4. The flaw is a broken access control condition (CWE-862) requiring only a valid WordPress account on a site with the plugin active (PR:L), remote reachability and low attack complexity with no user interaction; availability is unaffected. No public exploit code was identified at time of analysis, and this does not by itself permit full site takeover or denial of service.
Missing authorization in the WordPress plugin VideoWhisper Site Manager for ChatGPT, Claude, Codex (all versions through 1.2.10) lets an authenticated low-privilege site user reach plugin functionality that should require higher capabilities, resulting in limited confidentiality and integrity impact at CVSS 5.4. The flaw is a broken access control condition (CWE-862) requiring only a valid WordPress account on a site with the plugin active (PR:L), remote reachability and low attack complexity with no user interaction; availability is unaffected. No public exploit code was identified at time of analysis, and this does not by itself permit full site takeover or denial of service.