CodeRevolution Vulnerabilities and Affected Products
Vulnerabilities associated with Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit.
Products
Clear product- Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit4 vulnerabilities
- Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit2 vulnerabilities
- Crawlomatic Multipage Scraper Post Generator2 vulnerabilities
- Crawlomatic Multisite Scraper Post Generator2 vulnerabilities
- Echo RSS Feed Post Generator2 vulnerabilities
- WP Pocket URLs2 vulnerabilities
- Aimogen Pro1 vulnerability
- Aiomatic1 vulnerability
- aiomatic-automatic_ai_content_writer_\&_editor1 vulnerability
- Demo My WordPress1 vulnerability
- demo_my_wordpress1 vulnerability
- Echo RSS Feed Post Generator Plugin for WordPress1 vulnerability
- echo_rss_feed_post_generator1 vulnerability
- WP Setup Wizard1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-15982CRITICAL | Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit <= 2.8.4 - Unauthenticated Privilege Escalation via 'aiomatic_call_google_ai_function'The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. This is due to due to a missing capability check on the 'aiomatic_call_google_ai_function' function. This makes it possible for unauthenticated attackers to leverage the 'aimogen_wp_god_mode' tool to clear function blacklists and execute arbitrary PHP functions, such as creating administrator accounts. CWE-269Jul 17, 2026 | CVSS9.8v3.1 | EPSS0.339% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-4038CRITICAL | Aimogen Pro <= 2.7.5 - Unauthenticated Privilege Escalation via Arbitrary Function CallThe Aimogen Pro plugin for WordPress is vulnerable to Arbitrary Function Call that can lead to privilege escalation due to a missing capability check on the 'aiomatic_call_ai_function_realtime' function in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to call arbitrary WordPress functions such as 'update_option' to update the default role for registration to administrator and enable user registration for attackers to gain administrative user acces… CWE-862Mar 20, 2026 | CVSS9.8v3.1 | EPSS0.3% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |