Chat Ai With Dispatcher
Monthly
Unauthenticated arbitrary file upload in the Chat AI with Dispatcher WordPress plugin before 2.4 allows remote attackers to upload PHP files and, where uploads are stored in a web-executable location, achieve remote code execution (CVSS 9.8, AV:N/AC:L/PR:N/UI:N). The vendor has released version 2.4 to fix the issue. No confirmed active exploitation is reported (SSVC exploitation: none); a public PoC reference exists but is not verified as working exploit code, and practical exposure is bounded by the plugin's apparently niche deployment footprint.
Unauthenticated arbitrary file upload in the Chat AI with Dispatcher WordPress plugin before 2.4 allows remote attackers to upload PHP files and, where uploads are stored in a web-executable location, achieve remote code execution (CVSS 9.8, AV:N/AC:L/PR:N/UI:N). The vendor has released version 2.4 to fix the issue. No confirmed active exploitation is reported (SSVC exploitation: none); a public PoC reference exists but is not verified as working exploit code, and practical exposure is bounded by the plugin's apparently niche deployment footprint.