CVE-2025-13378 | Ays AI ChatBot with ChatGPT and Content Generator Plugin ays_chatgpt_pinecone_upsert server-side request forgery

A vulnerability marked as critical has been reported in Ays AI ChatBot with ChatGPT and Content Generator Plugin up to 2.7.0 on WordPress. This affects the function ays_chatgpt_pinecone_upsert. Performing manipulation results in server-side request forgery.

This vulnerability is reported as CVE-2025-13378. The attack is possible to be carried out remotely. No exploit exists.