Description
适用于 WordPress 的 Kognetiks 聊天机器人插件在所有版本（包括 2.0.0版本）中，由于缺少文件类型验证，存在任意文件上传漏洞。这使得未经授权的攻击者能够在受影响网站的服务器上上传任意文件，从而可能实现远程代码执行。
WordPress Kognetiks Chatbot for WordPress <= 2.0.0 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2024-32700
https://avd.aliyun.com/detail?id=AVD-2024-32700
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/chatbot-chatgpt/kognetiks-chatbot-for-wordpress-200-unauthenticated-arbitrary-file-upload
https://nvd.nist.gov/vuln/detail/CVE-2024-32700
https://wpscan.com/vulnerability/57ade042-3d16-494e-91f9-6abde069f2bd/
https://www.ddpoc.com/DVB-2025-10347.html
https://patchstack.com/database/vulnerability/chatbot-chatgpt/wordpress-kognetiks-chatbot-for-wordpress-plugin-2-0-0-arbitrary-file-upload-vulnerability
https://hackhalt.com/threat/cve-2024-32700/