Chat AI with Dispatcher WordPress plugin: Unauthenticated arbitrary file upload
Summary
The Chat AI with Dispatcher plugin for WordPress does not properly validate uploaded files and relies only on a client-supplied content type, which can be spoofed. An unauthenticated attacker can upload arbitrary files, including PHP scripts, which can lead to remote code execution on the web server. The attack requires no login and no user interaction, and the default WordPress setup is internet-facing.
Affected
- Chat AI with Dispatcher WordPress plugin, all versions before 2.4
- Oldest affected version: Unknown.
Fixed in
- Version 2.4
Workaround
- No workaround is needed if the plugin is updated to 2.4.
- If an update is not possible at once, deactivate and remove the plugin if it is not essential.
- Restrict access to the plugin endpoints at the web server or WAF.
- Make sure upload directories cannot execute PHP.
Exploitation
- Exploited in the wild: No evidence found as of 29 October 2026.
- Public proof of concept: None found.
- Not listed in CISA KEV.
- CISA SSVC: Automatable yes, technical impact total.
- EPSS: 0.2 %.
Our recommendation
- Inventory WordPress sites and check whether the plugin is installed and which version is used.
- Update the plugin to version 2.4 or later as a priority.
- Check upload directories for unexpected PHP files and investigate any findings.
- Review the vendor advisory and the plugin changelog before rollout.
- Monitor web server logs for unusual upload requests.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- WPScan vulnerability advisory wpscan.com
- VulDB CVE-2026-115245 vuldb.com
- OffSeq Radar threat entry radar.offseq.com
- Strix CVE entry www.strix.ai
- CVE Threat Intel record cve.threatint.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 30 Oct 2026, 16:08.
Original description (NVD)
The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spoofable client-supplied content type, allowing unauthenticated attackers to upload arbitrary files, including PHP, which can lead to remote code execution.
NVD references (1)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.