PT-2025-45306 · Ays Pro · Ai Chatbot With Chatgpt/Content Generator

Published 2025-11-06 · Updated 2026-04-23 · CVE-2025-62039

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AI ChatBot with ChatGPT and Content Generator by AYS versions prior to 2.6.7

Description An issue exists where sensitive information is inserted into sent data, allowing for the retrieval of embedded sensitive data, specifically resulting in unauthenticated API key exposure.

Recommendations Update to a version newer than 2.6.6.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2025-62039

Affected Products

Ai Chatbot With Chatgpt/Content Generator

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-62039 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/ays-chatgpt-assistant/vulnerability/wordpress-ai-chatbot-with-chatgpt-and-content-generator-by-ays-plugin-2-6-6-sensitive-data-exposure-vulnerability · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/ays-chatgpt-assistant/vulnerability/wordpress-ai-chatbot-with-chatgpt-and-content-generator-by-ays-plugin-2-6-6-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/ays-chatgpt-assistant/vulnerability/wordpress-ai-chatbot-with-chatgpt-and-content-generator-by-ays-plugin-2-6-6-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/pdnuclei_bot/status/2047193783981466090 · Twitter Post