External risk intelligence

Chat AI with Dispatcher WordPress Plugin Arbitrary File Upload Vulnerability.

CVE advisorySeverity: CRITICAL (CVSS 9.8)

CVE-2026-115245

The vulnerability exists in a WordPress plugin. WordPress sites are commonly deployed as public-facing web applications, and this plugin's functionality involves handling file uploads, which are frequently exposed to unauthenticated users on public web interfaces.

Unrestricted File Upload

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A vulnerability has been identified in the Chat AI with Dispatcher WordPress plugin that could allow unauthorized users to upload malicious files, potentially leading to system compromise. This issue arises from insufficient validation of file uploads, making it possible to execute arbitrary code. The main concern is to confirm if this plugin is in use and if so, assess the associated exposure.

Unrestricted file uploads can lead to code execution.
It affects popular public-facing websites.
Confirm usage and assess potential exposure.

Attack Path

How an attacker could exploit the issue

An attacker can exploit this vulnerability by uploading a malicious file to a WordPress site that uses the Chat AI with Dispatcher plugin. Since the plugin does not properly validate file types, an attacker can upload arbitrary files, such as PHP scripts, which could then be executed on the server. This could allow the attacker to gain control of the website.

No authentication needed.
Upload malicious file.
Remote code execution risk.

Live Threat

Current exploitation, exposure, and threat context

This vulnerability could allow an unauthenticated attacker to upload and execute arbitrary files, such as PHP scripts, on a WordPress site. When supported by the advisory, this could lead to the compromise of the server hosting the website.

Arbitrary file upload.
Exploits a weak file type check.
Could lead to server compromise.

Operational Fix

Recommended remediation, mitigation, and detection steps

This vulnerability in the Chat AI with Dispatcher WordPress plugin allows unauthenticated attackers to upload arbitrary files, potentially leading to remote code execution. Real-world responsibility will likely fall to the website's owner or the team managing the WordPress instance, often the application or infrastructure team, with support from the security team for exposure assessment and vendor management if the plugin was acquired through a third party. The immediate first step is to identify all instances of this plugin, confirm their exposure and criticality, and then plan remediation based on the identified risk.

Website owners/admins should own the issue.
Verify plugin reachability and criticality first.
Plan remediation based on exposure and risk.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the Chat AI with Dispatcher WordPress plugin?

This is an add-on for WordPress websites designed to integrate AI-driven chat functionality and message routing. It is typically used to automate customer service inquiries or site interactions directly within a browser interface. By processing incoming data, it extends the core capabilities of the WordPress platform to include automated conversational responses.

What does CVE-2026-115245 mean regarding file security?

This CVE describes a weakness known as Unrestricted Upload of File with Dangerous Type (CWE-434). The plugin fails to verify the actual content of uploaded files, relying only on user-provided metadata that can be easily manipulated. Because it accepts files based on this spoofable information, the system may inadvertently store and run malicious scripts.

How can an attacker trigger this vulnerability?

An attacker triggers this by sending a crafted request to the site that includes a malicious file, such as a PHP script. This action does not require the attacker to have an account or login credentials. It is important to note that simply visiting the site or browsing existing pages does not initiate the flaw; the vulnerability is only engaged when the specific file upload function is misused.

Do I need to worry if my site is not internet-facing?

Halo Surface Signal indicates that this plugin is frequently found on public-facing web applications. If your WordPress site is internal and inaccessible from the internet, the risk is significantly lower because attackers cannot reach the upload endpoint. However, if your instance is reachable from the public web, it is considered highly relevant to your security posture.

When should I update the Chat AI with Dispatcher plugin?

You should prioritize this immediately if you use versions of the plugin earlier than 2.4. Your first step is to perform an inventory of your WordPress installations to confirm if this specific plugin is currently active. Once identified, evaluate the necessity of the plugin and ensure you have a plan to update to the secure version or remove the component entirely if it is not essential.

References

wpscan.com/vulnerability/0981b4a5-dc97-4129-833c-8b297d5200bd/

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.