Advisories · Technology

Kognetiks Chatbot for WordPress.

Every CVE that names Kognetiks Chatbot for WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-32579 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability
- Kognetiks Chatbot for WordPress
- Unrestricted file upload
Not analysed yet 6 Oct 2026
CVE-2025-11256 CVE record

CVSS 5.3 Medium

Kognetiks Chatbot <= 2.3.5 - Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing
- Kognetiks Chatbot for WordPress
- Broken access control
Not analysed yet 18 Oct 2025
CVE-2024-10529 CVE record

CVSS 5.3 Medium

Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Deletion
- Kognetiks Chatbot for WordPress
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-11143 CVE record

CVSS 4.3 Medium

Kognetiks Chatbot for WordPress <= 2.1.8 - Cross-Site Request Forgery to Authenticated (Subscriber+) Assistant Modification
- Kognetiks Chatbot for WordPress
- Cross-site request forgery (CSRF)
Not analysed yet 13 Nov 2024
CVE-2024-10684 CVE record

CVSS 6.1 Medium

Kognetiks Chatbot for WordPress <= 2.1.7 - Reflected Cross-Site Scripting
- Kognetiks Chatbot for WordPress
- Cross-site scripting (XSS)
Not analysed yet 13 Nov 2024
CVE-2024-10531 CVE record

CVSS 5.3 Medium

Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Update
- Kognetiks Chatbot for WordPress
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-10530 CVE record

CVSS 4.3 Medium

Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Addition
- Kognetiks Chatbot for WordPress
- Broken access control
Not analysed yet 13 Nov 2024
CVE-2024-35738 CVE record

CVSS 6.5 Medium

WordPress Kognetiks Chatbot for WordPress plugin <= 1.9.8 - Cross Site Scripting (XSS) vulnerability
- Kognetiks Chatbot for WordPress
- Cross-site scripting (XSS)
Not analysed yet 8 Jun 2024
CVE-2024-32700 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerability
- Kognetiks Chatbot for WordPress
- Unrestricted file upload
Not analysed yet 13 May 2024
CVE-2024-4560 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Kognetiks Chatbot for WordPress <= 1.9.9 - Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function
- Kognetiks Chatbot for WordPress
- Unrestricted file upload
Not analysed yet 11 May 2024