CVE-2026-32579

The Kognetiks Chatbot for WordPress versions up to 2.4.9 are vulnerable to unauthenticated arbitrary file uploads, allowing attackers to upload malicious files without authentication. This critical vulnerability can lead to remote code execution, potentially compromising the entire WordPress site. WordPress site administrators and users of the Kognetiks Chatbot plugin should prioritize immediate updates to mitigate this severe risk.