The Chat AI with Dispatcher WordPress plugin prior to version 2.4 fails to properly validate uploaded files, relying solely on a spoofable client‑supplied content type. This flaw allows an attacker who is not authenticated to upload any file, including executable PHP code. Once uploaded, the code can be executed on the host server, granting the attacker full remote code execution on the compromised WordPress installation.

Any WordPress site that has the Chat AI with Dispatcher plugin installed with a version earlier than 2.4 is vulnerable. The issue is not tied to a specific WordPress core version, but rather to the plugin’s handling of uploads.

Because the vulnerability is exploitable without authentication and does not require privileged privileges, the potential impact is high. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, but the lack of any input validation alone indicates a widespread opportunity for attackers to inject and run code. The likely attack vector involves sending a crafted HTTP request to the plugin’s file upload endpoint, bypassing all checks. Attackers could upload a PHP shell or malicious script that, when accessed, could grant them full control of the affected WordPress site.