Chat AI with Dispatcher
Chat AI with Dispatcher has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of November 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 1 of the records (100%).
The one issue recorded for Chat AI with Dispatcher has a vendor fix available, so running the current release closes it.
All of these findings were reported by Enrico Marcolini. The current release is tested up to WordPress 6.9.11.
CVE-2026-115245Chat AI with Dispatcher <= 2.3 - Unauthenticated Arbitrary File Upload
Read the full analysisVulnerability Records

Chat AI with Dispatcher
Author
Váradi Csaba
Discover the Chat AI with Dispatcher plugin: a free live chat solution combining AI and human supervision for WordPress. It provides instant responses via a credit-based AI system with real-time dispatcher control. Important: The plugin connects to an external AI service that incurs usage costs. Upon purchase, a starting credit equal to the full purchase price is credited to the user account to cover AI usage. Users can top-up credits if needed. Why choose it? Combines AI speed with human accuracy. Prevents visitor frustration with real-time takeover. Mobile-friendly and easy to install. Why Choose Chat AI with Dispatcher? AI + human power for perfect responses. Enhances customer experience. Reduces lost sales with instant support. Competitive edge over basic chatbots. Lightens support workload. Key Features Dispatcher Mode: Live conversation monitoring. One-Click Takeover: Handle complex queries. Screenshot Upload: Visual issue support. Flexible Handover: Back to AI when done. Multilingual: Language-independent AI. Mobile-Friendly: Works on all devices. External Services This plugin connects to the vrcs.hu API to provide AI chatbot functionality, credit-based billing, and package management. Service: vrcs.hu Purpose: Provides AI-powered chatbot responses, credit management, and package selection for the plugin. Data Sent: During registration: Domain name, user email, store email. During credit monitoring: Registration ID, domain name, credit monitoring status (0 or 1). During package retrieval or registration check: Registration ID, domain name. When Data is Sent: When registering the plugin via the admin settings page. When enabling/disabling credit monitoring. When retrieving available packages or verifying registration status. Terms of Service: https://www.vrcs.hu/Terms-of-Use?route=information/information&language=en-gb Privacy Policy: https://www.vrcs.hu/Privacy-Policy-and-Notice?route=information/information&language=en-gb
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C