CRITICAL 9.8 CVE-2026-115245 Published 29 Oct 2026

WordPress Chat AI with Dispatcher Plugin Arbitrary File Upload RCE

Worried this affects your website?

Get Emergency Help help@myserverhacked.com

The Chat AI with Dispatcher WordPress plugin before version 2.4 contains an arbitrary file upload vulnerability.

The plugin does not properly validate uploaded files and relies only on a spoofable client-supplied content type. This allows unauthenticated attackers to upload arbitrary files, including PHP.

Affected versions: before 2.4
Impact: remote code execution

Reference: CVE-2026-115245 on NVD

← Back to Security News