Researchers from Salt Security discovered three types of vulnerabilities in ChatGPT plugins that can be could have led to data exposure and account takeovers.
ChatGPT plugins are additional tools or extensions that can be integrated with ChatGPT to extend its functionalities or enhance specific aspects of the user experience. These plugins may include new natural language processing features, search capabilities, integrations with other services or platforms, text analysis tools, and more. Essentially, plugins allow users to customize and tailor the ChatGPT experience to their specific needs.
Paid Memberships Pro : CVE-2023-23488 - Unauthenticated SQL Injection
Easy Digital Downloads: CVE-2023-23489 - Unauthenticated SQL Injection
Survey Maker: CVE-2023-23490 - Authenticated SQL Injection