Kognetiks Kognetiks Chatbot For Wordpress
9 CVEs affecting Kognetiks Kognetiks Chatbot For Wordpress. Latest disclosed: 2025-10-18. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-32700 | Critical | 10.0 | 2024-05-13 | Unrestricted Upload of File with Dangerous Type vulnerability in Kognetiks Kognetiks Chatbot for WordPress.This issue affects Kognetiks Chatbot for WordPress… |
CVE-2024-4560 | Critical | 9.8 | 2024-05-11 | The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the chatbot_chatgpt_upl… |
CVE-2024-35738 | Medium | 6.5 | 2024-06-08 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kognetiks Kognetiks Chatbot for WordPress allows S… |
CVE-2024-10684 | Medium | 6.1 | 2024-11-13 | The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dir' parameter in all versions up to, and inc… |
CVE-2025-11256 | Medium | 5.3 | 2025-10-18 | The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all ver… |
CVE-2024-10529 | Medium | 5.3 | 2024-11-13 | The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_ass… |
CVE-2024-10531 | Medium | 5.3 | 2024-11-13 | The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_ass… |
CVE-2024-11143 | Medium | 4.3 | 2024-11-13 | The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.8. This is due t… |
CVE-2024-10530 | Medium | 4.3 | 2024-11-13 | The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the add_new_as… |