Kognetiks Chatbot For Wordpress
Monthly
Unauthenticated arbitrary file upload in Kognetiks Chatbot for WordPress 2.4.9 and earlier allows remote attackers to upload files to the WordPress site without authentication, potentially leading to code execution if the uploaded file is placed in a web-executable location. The independent assessment confirms a high-priority, genuine vulnerability with remote unauthenticated exploitation, no user interaction, and only the vulnerable plugin being installed and active as a prerequisite. No CISA KEV entry or public exploit code is identified in the provided data, and EPSS is not provided.
Unauthenticated arbitrary file upload in Kognetiks Chatbot for WordPress 2.4.9 and earlier allows remote attackers to upload files to the WordPress site without authentication, potentially leading to code execution if the uploaded file is placed in a web-executable location. The independent assessment confirms a high-priority, genuine vulnerability with remote unauthenticated exploitation, no user interaction, and only the vulnerable plugin being installed and active as a prerequisite. No CISA KEV entry or public exploit code is identified in the provided data, and EPSS is not provided.