Description
WordPress 是一个流行的开源内容管理系统（CMS），广泛用于创建和管理网站。Kognetiks Chatbot for WordPress 插件是一款用于在 WordPress 网站中集成聊天机器人的插件。该插件版本 <= 2.0.0 存在任意文件上传漏洞，攻击者可以利用该漏洞上传恶意文件，从而在受害者服务器上执行任意代码，导致网站被入侵或数据泄露。
WordPress Kognetiks Chatbot for WordPress 插件 <= 2.0.0 /wp-admin/admin-ajax.php 文件上传漏洞 （CVE-2024-32700）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-32700
https://wpscan.com/vulnerability/57ade042-3d16-494e-91f9-6abde069f2bd/
https://patchstack.com/database/vulnerability/chatbot-chatgpt/wordpress-kognetiks-chatbot-for-wordpress-plugin-2-0-0-arbitrary-file-upload-vulnerability
https://github.com/nastar-id/CVE-2024-32700
https://cve.imfht.com/detail/CVE-2024-32700
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/chatbot-chatgpt/kognetiks-chatbot-for-wordpress-217-reflected-cross-site-scripting
https://hackhalt.com/threat/cve-2024-32700/
https://access.redhat.com/security/cve/cve-2024-32700
https://wordpress.org/plugins/chatbot-chatgpt/