Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: kognetiks Clear all filters
TI-2024-09753 CVE-2024-10529 · GHSA-7p5h-w4v8-78m4

Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Deletion

Priority LOW 31

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_assistant() function in all versions up to, and including, 2.1.7…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00542 Published 2024-11-13 No fix listed CWE-862
TI-2024-10327 CVE-2024-11143 · GHSA-rp2q-vm9w-w2jm

Cross-site request forgery in Kognetiks Chatbot for WordPress

Priority LOW 20

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.8.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0026 Published 2024-11-13 No fix listed CWE-352
TI-2024-09902 CVE-2024-10684 · GHSA-xxj2-mx8m-c7xg

Kognetiks Chatbot for WordPress <= 2.1.7 - Reflected Cross-Site Scripting

Priority LOW 27

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dir' parameter in all versions up to, and including, 2.1.7 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00403 Published 2024-11-13 No fix listed CWE-79
TI-2024-09755 CVE-2024-10531 · GHSA-9v28-6wg7-w9m4

Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Update

Priority LOW 31

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the update_assistant() function in all versions up to, and including, 2.1.7…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0054 Published 2024-11-13 No fix listed CWE-862
TI-2024-09754 CVE-2024-10530 · GHSA-jfcv-w56x-mqqx

Kognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant Addition

Priority LOW 20

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the add_new_assistant() function in all versions up to, and including, 2.1.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0045 Published 2024-11-13 No fix listed CWE-862
TI-2024-23607 CVE-2024-35738 · GHSA-gq58-fgx6-mcj5

WordPress Kognetiks Chatbot for WordPress plugin <= 1.9.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kognetiks Kognetiks Chatbot for WordPress allows Stored XSS.This issue affects Kognetiks Chatbot for WordPress:…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-06-08 No fix listed CWE-79
TI-2024-04246 CVE-2024-4560 · GHSA-wj5v-6qjm-57pp

Unrestricted file upload in Kognetiks Chatbot for WordPress

Priority MEDIUM 51

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the chatbot_chatgpt_upload_file_to_assistant function in all versions up to, and inc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2024-05-11 No fix listed CWE-434