Skip to content
OpenAdvisories

Vendor

CodeRevolution

19 known vulnerabilities.

Products

Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit 4 Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit 2 Crawlomatic Multipage Scraper Post Generator 2 WP Pocket URLs 2 Echo RSS Feed Post Generator 2 Crawlomatic Multisite Scraper Post Generator 2 Aimogen Pro 1 Aiomatic 1 Demo My WordPress 1 Echo RSS Feed Post Generator Plugin for WordPress 1 WP Setup Wizard 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-15982

    Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit <= 2.8.4 - Unauthenticated Privilege Escalation via 'aiomatic_call_google_ai_function'

    The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. This is due to due to a missing capability check on the 'aiomatic_call…

    CodeRevolution Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit Web / CMS
  • Critical 10.0
    CVE-2026-57719

    WordPress Aimogen Pro plugin <= 2.8.3 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen-pro allows Using Malicious Files.This issue affects Aimogen Pro: from n/a through <= 2.8.3.

    CodeRevolution Aimogen Pro
  • Critical 9.8
    CVE-2026-4038

    Aimogen Pro <= 2.7.5 - Unauthenticated Privilege Escalation via Arbitrary Function Call

    The Aimogen Pro plugin for WordPress is vulnerable to Arbitrary Function Call that can lead to privilege escalation due to a missing capability check on the 'aiomatic_call_ai_function_realtime' function in all versions up to, and including, 2.7.5. This makes …

    CodeRevolution Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit Web / CMS
  • Critical 9.8
    CVE-2025-4389 Public exploit

    Crawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unauthenticated Arbitrary File Upload

    The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the crawlomatic_generate_featured_image() function in all versions up to, and including, 2.6.8.1. This makes i…

    CodeRevolution Crawlomatic Multipage Scraper Post Generator Web / CMS
  • Critical 9.8
    CVE-2025-4391

    Echo RSS Feed Post Generator <= 5.4.8.1 - Unauthenticated Arbitrary File Upload

    The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the echo_generate_featured_image() function in all versions up to, and including, 5.4.8.1. This makes it possible for unauthen…

    CodeRevolution Echo RSS Feed Post Generator Web / CMS
  • Critical 9.8
    CVE-2024-9265

    Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation

    The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.4.6. This is due to the plugin not properly restricting the roles that can set during registration through the echo_check_post_…

    CodeRevolution Echo RSS Feed Post Generator Web / CMS
  • Critical 9.8
    CVE-2024-31290

    WordPress Demo My WordPress plugin <= 1.0.9.1 - Unauthenticated Privilege Escalation vulnerability

    Improper Privilege Management vulnerability in CodeRevolution Demo My WordPress allows Privilege Escalation.This issue affects Demo My WordPress: from n/a through 1.0.9.1.

    CodeRevolution Demo My WordPress Web / CMS