SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-32579

CriticalCVSS 10.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.49%

40th percentile - higher than 40% of all known CVEs

Summary

The vulnerability allows an unauthenticated attacker to perform arbitrary file upload in Kognetiks Chatbot for WordPress up to version 2.4.9.

Risk Assessment

An attacker can upload malicious files to the server, potentially leading to site takeover or execution of malicious code.

Recommendation

Update the Kognetiks Chatbot plugin to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in Kognetiks Chatbot

Original NVD description (English source)

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS