PT-2025-26712 · WordPress · The Aiomatic
Khanhhnahk1
·
Published
2025-06-24
·
Updated
2025-08-13
·
CVE-2025-6206
CVSS v3.1
7.5
High
| Vector | AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
The Aiomatic - Automatic AI Content Writer & Editor plugin for WordPress versions up to, and including, 2.5.0
Description:
The issue allows for arbitrary file uploads due to missing file type validation in the
aiomatic image editor ajax submit function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server, which may make remote code execution possible. To exploit the issue, a value must be entered for the Stability.AI API key, which can be arbitrary.Recommendations:
For versions up to, and including, 2.5.0, update to a version that includes a fix for the missing file type validation in the
aiomatic image editor ajax submit function.
As a temporary workaround, consider disabling the aiomatic image editor ajax submit function until a patch is available.
Restrict access to the Aiomatic plugin to minimize the risk of exploitation, especially for users with Subscriber-level access and above.Fix
RCE
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
The Aiomatic