What happened
The plugin relies solely on the client-supplied Content-Type for validation of uploaded files, so an unauthenticated attacker can upload a PHP payload and achieve remote code execution on the host.
Why it matters
This is an unauthenticated RCE in an AI chatbot plugin that can be installed on thousands of WordPress sites. It gives an attacker full code execution on a host that may also run other web apps, and it requires no credentials — the most attacker-friendly class of AI-plugin bug.
Attack vector
The plugin validates file uploads only against a client-supplied content type, which an attacker can spoof. An unauthenticated request uploads an arbitrary file (including PHP) that the server then executes, yielding RCE on the WordPress host.
Affected systems
Chat AI with Dispatcher WordPress plugin < 2.4 (fixed in 2.4).
Mitigation
Update to Chat AI with Dispatcher 2.4, which fixes the upload validation.