title: GPT3 AI Content Writer < 1.4.38 - Subscriber+ Arbitrary Post Content Update
description: The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin before 1.4.38 does not perform any kind of nonce or privilege checks before letting logged-in users modify arbitrary posts.
problem types: CWE-862 Missing Authorization
affected:
{
vendor: Unknown
product: GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training
versions:
status: affected, versionType: custom, version: 0, lessThan: 1.4.38
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}