critical9.8
CVE-2026-115245
The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spoofable client-supplied content type, al…
Impact
The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spoofable client-supplied content type, allowing unauthenticated attackers to upload arbitrary files, including PHP, which can lead to remote code execution.
Affected products
| Product | Affected versions |
|---|---|
| Chat AI With Dispatcher WordPress Plugin | before 2.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.