Skip to content

Known CVE

SmartSearchWP < 2.4.6 - OpenAI Key Disclosure

The plugin does not have proper authorization in one of its REST endpoint, allowing unauthenticated users to retrieve the encoded key and then decode it, thereby leaking the OpenAI API key.

CVE-2024-6845

Medium2024CVSS 5.3CWE-862

cve2024 · exposure · wp · wordpress · wp-plugin · smartsearchwp · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website