CodeRevolution Vulnerabilities and Affected Products
Vulnerabilities associated with Crawlomatic Multisite Scraper Post Generator.
Products
Clear product- Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit4 vulnerabilities
- Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit2 vulnerabilities
- Crawlomatic Multipage Scraper Post Generator2 vulnerabilities
- Crawlomatic Multisite Scraper Post Generator2 vulnerabilities
- Echo RSS Feed Post Generator2 vulnerabilities
- WP Pocket URLs2 vulnerabilities
- Aimogen Pro1 vulnerability
- Aiomatic1 vulnerability
- aiomatic-automatic_ai_content_writer_\&_editor1 vulnerability
- Demo My WordPress1 vulnerability
- demo_my_wordpress1 vulnerability
- Echo RSS Feed Post Generator Plugin for WordPress1 vulnerability
- echo_rss_feed_post_generator1 vulnerability
- WP Setup Wizard1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-49294MEDIUM | WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Sensitive Data Exposure via Log Exposure vulnerabilityInsertion of Sensitive Information Into Sent Data vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator crawlomatic-multipage-scraper-post-generator allows Retrieve Embedded Sensitive Data.This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through <= 2.6.8.2. CWE-201Jun 6, 2025 | CVSS5.3v3.1 | EPSS0.306% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-49293MEDIUM | WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Broken Access Control VulnerabilityMissing Authorization vulnerability in CodeRevolution Crawlomatic Multisite Scraper Post Generator crawlomatic-multipage-scraper-post-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Crawlomatic Multisite Scraper Post Generator: from n/a through <= 2.6.8.2. CWE-862Jun 6, 2025 | CVSS4.3v3.1 | EPSS0.241% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |