Unrestricted Upload of File with Dangerous Type Vulnerability Affects Kognetiks Chatbot for WordPress
CVE-2024-32700

10CRITICAL

Key Information:

Vendor
Wordpress
Vendor
CVE Published:
14 May 2024

Summary

The Kognetiks Chatbot for WordPress is susceptible to an unrestricted file upload vulnerability, allowing attackers to upload files with dangerous types. This flaw can lead to various security risks including unauthorized access and code execution on the server. Affected versions prior to 2.0.0 are particularly vulnerable, necessitating immediate actions to mitigate the risk. Website administrators are urged to assess their installations and apply necessary patches to protect against potential exploitation.

Affected Version(s)

Kognetiks Chatbot for WordPress <= 2.0.0

References

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LVT-tholv2k (Patchstack Alliance)
.