Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the store_data() and get_chatgpt_api_key() functions in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to view, modify or delete the plugin's ChatGPT API key. The vulnerability was partially fixed in version 2.7.5 and fully fixed in version 2.7.6
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-10 | 1 | Disclosure1 |
| 2026-03-02 | 2 | Disclosure2 |
| 2026-03-03 | 2 | Disclosure2 |
| 2026-03-11 | 1 | Disclosure1 |
| 2026-03-13 | 1 | General1 |
Just published: Critical Analysis CVE-2026-1336 - The AI ChatBot with ChatGPT and Content.... Practical security guidance from the trenches. Read more: https://threatops.tech/blog/critical-analysis-cve-2026-1336-the-ai-chatbot-with-chatgpt-and-content-generator-by-ays-plu-march-
Post summary
The passage only refers to a blog post about CVE‑2026‑1336, lacking detailed technical analysis, PoC, or exploitation evidence.
⚡ New CVE Alert: CVE-2026-1336 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1336 #CVE-2026-1336 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/syhGCSALB2
Post summary
A new medium‑severity CVE affecting WordPress (CVE‑2026‑1336) has been announced, with basic severity details provided but no exploit or patch information.
Just published: Critical Analysis CVE-2026-1336 - The AI ChatBot with ChatGPT and Content.... Practical security guidance from the trenches. Read more: https://threatops.tech/blog/critical-analysis-cve-2026-1336-the-ai-chatbot-with-chatgpt-and-content-generator-by-ays-plu-march-
Post summary
The passage announces a new blog that provides a critical analysis of CVE‑2026‑1336, which appears to affect an AI chatbot built with ChatGPT.
CVE-2026-1336 Unauthenticated API Key Exposure in WordPress AYS ChatGPT Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1336
Post summary
The text announces CVE-2026-1336, noting an unauthenticated API key exposure in the WordPress AYS ChatGPT Plugin, but provides no further details or evidence of exploitation.
🚨*CVE* CVE-2026-1336 The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability ch… https://www.cve.org/CVERecord?id=CVE-2026-1336 ----- Traducción: CVE-2026-1336 El … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑1336, noting that the AYS WordPress plugin allows unauthorized access and data modification due to a missing capability, but it does not provide a PoC, exploit, or patch details.
CVE-2026-1336 The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability ch… https://www.cve.org/CVERecord?id=CVE-2026-1336
Post summary
CVE-2026-1336 exposes the AYS WordPress plugin to unauthorized data access and modification because of missing capability checks.
Looks like the EU Commission's Ivanti EPMM MDM software had a bad case of CVE-2026-1281 and CVE-2026-1336 - not exactly a good look for the cybersecurity trailblazers. #cybersecurity #vulnerability #cyberattack https://explainitagain.wixsite.com/explain-it-again/post/european-commission-responds-to-mobile-device-cyberattack
Post summary
The EU Commission’s Ivanti EPMM MDM software is reported to have CVE‑2026‑1281 and CVE‑2026‑1336, but no further details on exploitation, patches, or technical specifics are provided.