Vulnerabilidades em kognetiks
9 resultadosAnálise Vexday
Kognetiks apresenta 7 vulnerabilidades catalogadas, com 1 classificada como crítica, mas nenhuma sob ataque ativo no momento. A ausência de publicações recentes e de exploração ativa sugere risco contido, embora a fraqueza dominante em controle de acesso (CWE-862) demande atenção em ambientes com dados sensíveis.
CVE-2024-32700CRITICALWordPress Kognetiks Chatbot for WordPress plugin <= 2.0.0 - Arbitrary File Upload vulnerabilityEPSS 2.6%CVE-2024-4560CRITICALKognetiks Chatbot for WordPress <= 1.9.9 - Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant FunctionEPSS 0.9%CVE-2024-10529MEDIUMKognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant DeletionEPSS 0.5%CVE-2024-10531MEDIUMKognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant UpdateEPSS 0.5%CVE-2024-10530MEDIUMKognetiks Chatbot for WordPress <= 2.1.7 - Missing Authorization to Authenticated (Subscriber+) Assistant AdditionEPSS 0.4%CVE-2024-10684MEDIUMKognetiks Chatbot for WordPress <= 2.1.7 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2025-11256MEDIUMKognetiks Chatbot <= 2.3.5 - Missing Authorization to Unauthenticated Limited File Uploads and Conversation ErasingEPSS 0.4%CVE-2024-35738MEDIUMWordPress Kognetiks Chatbot for WordPress plugin <= 1.9.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-11143MEDIUMKognetiks Chatbot for WordPress <= 2.1.8 - Cross-Site Request Forgery to Authenticated (Subscriber+) Assistant ModificationEPSS 0.2%