WordPress plugin

Kognetiks Chatbot security & vulnerabilities

Q: Is any Kognetiks Chatbot vulnerability listed in CISA KEV?

No. None of the known Kognetiks Chatbot vulnerabilities is currently listed in the CISA KEV catalog.

chatbot-chatgpt— active installsLast vulnerability Oct 4, 2026

No known unpatched vulnerabilities in the latest version

All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

10Known vulnerabilities

Critical3
High0
Medium7
Low0

Vulnerabilities per year

All Kognetiks Chatbot vulnerabilities

Kognetiks Chatbot vulnerabilities
Severity	Vulnerability	CVE	Published
Critical9.8	Unauthenticated Arbitrary File Upload ≤2.4.9Update to 2.5.0	CVE-2026-32579	Oct 04
Medium5.3	Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing ≤2.3.5Update to 2.3.6	CVE-2025-11256	Oct 17, 2025
Medium5.3	Missing Authorization to Authenticated (Subscriber+) Assistant Deletion ≤2.1.7Update to 2.1.8	CVE-2024-10529	Nov 12, 2024
Medium5.3	Missing Authorization to Authenticated (Subscriber+) Assistant Update ≤2.1.7Update to 2.1.8	CVE-2024-10531	Nov 12, 2024
Medium6.1	Reflected Cross-Site Scripting ≤2.1.7Update to 2.1.8	CVE-2024-10684	Nov 12, 2024
Medium4.3	Cross-Site Request Forgery to Authenticated (Subscriber+) Assistant Modification ≤2.1.8Update to 2.1.9	CVE-2024-11143	Nov 12, 2024
Medium4.3	Missing Authorization to Authenticated (Subscriber+) Assistant Addition ≤2.1.7Update to 2.1.8	CVE-2024-10530	Nov 12, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.9.8Update to 1.9.9	CVE-2024-35738	Jun 6, 2024
Critical10.0	Unauthenticated Arbitrary File Upload ≤2.0.0Update to 2.0.1	CVE-2024-32700	May 13, 2024
Critical9.8	Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function ≤1.9.9Update to 2.0.0	CVE-2024-4560	May 10, 2024

Critical9.8
Unauthenticated Arbitrary File Upload
≤2.4.9Update to 2.5.0
CVE-2026-32579Oct 04
Medium5.3
Missing Authorization to Unauthenticated Limited File Uploads and Conversation Erasing
≤2.3.5Update to 2.3.6
CVE-2025-11256Oct 17, 2025
Medium5.3
Missing Authorization to Authenticated (Subscriber+) Assistant Deletion
≤2.1.7Update to 2.1.8
CVE-2024-10529Nov 12, 2024
Medium5.3
Missing Authorization to Authenticated (Subscriber+) Assistant Update
≤2.1.7Update to 2.1.8
CVE-2024-10531Nov 12, 2024
Medium6.1
Reflected Cross-Site Scripting
≤2.1.7Update to 2.1.8
CVE-2024-10684Nov 12, 2024
Medium4.3
Cross-Site Request Forgery to Authenticated (Subscriber+) Assistant Modification
≤2.1.8Update to 2.1.9
CVE-2024-11143Nov 12, 2024
Medium4.3
Missing Authorization to Authenticated (Subscriber+) Assistant Addition
≤2.1.7Update to 2.1.8
CVE-2024-10530Nov 12, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.9.8Update to 1.9.9
CVE-2024-35738Jun 6, 2024
Critical10.0
Unauthenticated Arbitrary File Upload
≤2.0.0Update to 2.0.1
CVE-2024-32700May 13, 2024
Critical9.8
Unauthenticated Arbitrary File Upload via chatbot_chatgpt_upload_file_to_assistant Function
≤1.9.9Update to 2.0.0
CVE-2024-4560May 10, 2024

Kognetiks Chatbot: common questions

Does Kognetiks Chatbot have known vulnerabilities?

Yes. VulnCrest Radar lists 10 known vulnerabilities in Kognetiks Chatbot: 3 critical, 7 medium. None are known to affect version null.

How do I check which version of Kognetiks Chatbot I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Kognetiks Chatbot vulnerability?

CVE-2026-32579, published Oct 4, 2026: Kognetiks Chatbot <= 2.4.9 - Unauthenticated Arbitrary File Upload. Severity: Critical (CVSS 9.8).

Is any Kognetiks Chatbot vulnerability listed in CISA KEV?

No. None of the known Kognetiks Chatbot vulnerabilities is currently listed in the CISA KEV catalog.