PT-2026-60718 · Coderevolution · Aimogen Pro - All-In-One Ai Content Writer

Bao Le · CVE-2026-15982 · Publicado 2026-07-17 · Atualizado 2026-07-17

Mitre

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. This is due to due to a missing capability check on the 'aiomatic call google ai function' function. This makes it possible for unauthenticated attackers to leverage the 'aimogen wp god mode' tool to clear function blacklists and execute arbitrary PHP functions, such as creating administrator accounts.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2026-15982

Produtos afetados

Aimogen Pro - All-In-One Ai Content Writer

Referências · 3

• https://wordfence.com/threat-intel/vulnerabilities/id/53cc91fa-51fd-4d16-b740-a48f8d446b5d?source=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-15982 · Nota de Segurança
• https://coderevolution.ro/knowledge-base/faq/full-changelog-aiomatic-automatic-ai-content-writer-editor-gpt-3-gpt-4-chatgpt-chatbot-ai-toolkit · Nota