Kognetiks Chatbot for WordPress — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Kognetiks Chatbot for WordPress, with AI-generated Chinese analysis, references, and POCs.

Vendor: kognetiks

CVE ID	Title	CVSS	Severity	Published
CVE-2026-32579	WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability CWE-434	10.0	Critical	2026-10-06
CVE-2025-11256	Kognetiks Chatbot <= 2.3.5 - Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing CWE-285	5.3	Medium	2025-10-18
CVE-2024-11143	Kognetiks Chatbot for WordPress <= 2.1.8 - Cross-Site Request Forgery to Authenticated (Subscriber+) Assistant Modification CWE-352	4.3	Medium	2024-11-13
CVE-2024-10529	Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Deletion CWE-862	5.3	Medium	2024-11-13
CVE-2024-10684	Kognetiks Chatbot for WordPress <= 2.1.7 - Reflected Cross-Site Scripting CWE-79	6.1	Medium	2024-11-13
CVE-2024-10531	Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Update CWE-862	5.3	Medium	2024-11-13
CVE-2024-10530	Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Addition CWE-862	4.3	Medium	2024-11-13
CVE-2024-35738	WordPress Kognetiks Chatbot for WordPress plugin <= 1.9.8 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2024-06-08
CVE-2024-32700	WordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerability CWE-434	10.0	Critical	2024-05-13
CVE-2024-4560	Kognetiks Chatbot for WordPress <= 1.9.9 - Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function CWE-434	9.8	Critical	2024-05-11

All 10 known CVE vulnerabilities affecting Kognetiks Chatbot for WordPress with full Chinese analysis, references, and POCs where available.