Arbitrary File Upload Vulnerability in Kognetiks Chatbot for WordPress Plugin

CVE-2024-4560

Summary

The Kognetiks Chatbot for WordPress plugin is exposed to a vulnerability allowing arbitrary file uploads due to inadequate file type validation in its upload function. This security lapse affects all versions prior to 1.9.9, enabling unauthenticated attackers to exploit the flaw and upload malicious files to the server. Such an upload may pave the way for remote code execution, potentially compromising the integrity and security of the affected WordPress site.

References