Chat AI with Dispatcher
CVE-2026-115245: The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spoofable client-supplied content type, all
CVE-2026-115245 Oct 29, 2026 Source: Vendor
The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spoofable client-supplied content type, allowing unauthenticated attackers to upload arbitrary files, including PHP, which can lead to remote code execution.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://nvd.nist.gov/vuln/detail/CVE-2026-115245
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3 matching , clear filters
CVE-2026-115245
BR2026-0000-038020
unclaimed
Credited as Enrico Marcolini
CVE-2026-115245
BR2026-0000-038021
unclaimed
Credited as Claudio Marchesini
CVE-2026-115245
BR2026-0000-038022
unclaimed
Credited as Dottor Marc