Lucene search
WpvulndbWPVDB-ID:57ADE042-3D16-494E-91F9-6ABDE069F2BDHistoryMay 15, 2024 - 12:00 a.m.
Kognetiks Chatbot for WordPress < 2.0.1 - Unauthenticated Arbitrary File Upload
2024-05-1500:00:00
wpscan.com
6
kognetiks
chatbot
wordpress
arbitrary file upload
unauthenticated
remote code execution
security vulnerability
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0
Percentile
9.0%
Description The plugin is vulnerable to arbitrary file uploads due to missing file type validation, allowing unauthenticated attackers to upload arbitrary files on the affected site’s server which may make remote code execution possible.
Related
vulnrichment
vulnrichment
nvd
nvd
CVE-2024-32700
2024-05-14 15:36:58
cve
cve
CVE-2024-32700
2024-05-14 15:36:58
cvelist
cvelist
wordfence
wordfence
CVSS3
10
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:57ADE042-3D16-494E-91F9-6ABDE069F2BD