Kognetiks vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Kognetiks products: 2 record(s), with severity, exploitation and fixes.

Kognetiks Chatbot for WordPress 2

Exploited only (KEV) →

CVE-2026-32579 Critical · 10.0 CWE-434 Oct 6, 2026

WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.

CVE-2025-11256 Medium · 5.3 CWE-285 Oct 18, 2025

Kognetiks Chatbot <= 2.3.5 - Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing

The Kognetiks Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.3.5. This makes it possible for unauthenticated attackers to upload limited safe files and erase conversations.