Unrestricted Upload of File with Dangerous Type Vulnerability Affects Kognetiks Chatbot for WordPress
CVE-2024-32700
10CRITICAL
Key Information:
- Vendor
- Wordpress
- Vendor
- CVE Published:
- 14 May 2024
Summary
The Kognetiks Chatbot for WordPress is susceptible to an unrestricted file upload vulnerability, allowing attackers to upload files with dangerous types. This flaw can lead to various security risks including unauthorized access and code execution on the server. Affected versions prior to 2.0.0 are particularly vulnerable, necessitating immediate actions to mitigate the risk. Website administrators are urged to assess their installations and apply necessary patches to protect against potential exploitation.
Affected Version(s)
Kognetiks Chatbot for WordPress <= 2.0.0
References
CVSS V3.1
Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved
Credit
LVT-tholv2k (Patchstack Alliance)