PT-2026-60718 · Coderevolution · Aimogen Pro - All-In-One Ai Content Writer

Bao Le · CVE-2026-15982 · Published 2026-07-17 · Updated 2026-07-17

Mitre

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. This is due to due to a missing capability check on the 'aiomatic call google ai function' function. This makes it possible for unauthenticated attackers to leverage the 'aimogen wp god mode' tool to clear function blacklists and execute arbitrary PHP functions, such as creating administrator accounts.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-15982

Affected Products

Aimogen Pro - All-In-One Ai Content Writer

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-15982 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/53cc91fa-51fd-4d16-b740-a48f8d446b5d?source=cve · Note
• https://coderevolution.ro/knowledge-base/faq/full-changelog-aiomatic-automatic-ai-content-writer-editor-gpt-3-gpt-4-chatgpt-chatbot-ai-toolkit · Note