{"items":[{"id":"CVE-2026-15982","published":"2026-07-17T05:35:58.570Z","updated":"2026-07-17T10:11:03.243Z","title":"Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit <= 2.8.4 - Unauthenticated Privilege Escalation via 'aiomatic_call_google_ai_function'","severity":"CRITICAL","score":9.8,"vendor":"CodeRevolution","product":"Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit","kev":false,"epss":0.00528,"kevAdded":null},{"id":"CVE-2026-57719","published":"2026-07-13T08:41:24.849Z","updated":"2026-07-13T16:07:50.613Z","title":"WordPress Aimogen Pro plugin <= 2.8.3 - Arbitrary File Upload vulnerability","severity":"CRITICAL","score":10,"vendor":"CodeRevolution","product":"Aimogen Pro","kev":false,"epss":0.00522,"kevAdded":null},{"id":"CVE-2026-9009","published":"2026-05-28T05:30:40.431Z","updated":"2026-05-28T10:36:35.093Z","title":"Crawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute","severity":"HIGH","score":8.8,"vendor":"CodeRevolution","product":"Crawlomatic Multipage Scraper Post Generator","kev":false,"epss":0.00446,"kevAdded":null},{"id":"CVE-2026-4038","published":"2026-03-20T03:37:02.014Z","updated":"2026-04-08T17:16:49.699Z","title":"Aimogen Pro <= 2.7.5 - Unauthenticated Privilege Escalation via Arbitrary Function Call","severity":"CRITICAL","score":9.8,"vendor":"CodeRevolution","product":"Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2025-6206","published":"2025-06-24T08:23:55.136Z","updated":"2026-04-08T17:06:16.386Z","title":"Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload","severity":"HIGH","score":7.5,"vendor":"CodeRevolution","product":"Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit","kev":false,"epss":0.00542,"kevAdded":null},{"id":"CVE-2025-49312","published":"2025-06-17T15:01:24.280Z","updated":"2026-04-28T16:13:00.781Z","title":"WordPress Echo RSS Feed Post Generator Plugin for WordPress plugin <= 5.4.8.1 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"CodeRevolution","product":"Echo RSS Feed Post Generator Plugin for WordPress","kev":false,"epss":0.00332,"kevAdded":null},{"id":"CVE-2025-49294","published":"2025-06-06T12:53:46.025Z","updated":"2026-04-28T16:13:00.329Z","title":"WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Sensitive Data Exposure via Log Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"CodeRevolution","product":"Crawlomatic Multisite Scraper Post Generator","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2025-49293","published":"2025-06-06T12:53:45.575Z","updated":"2026-04-28T16:13:00.283Z","title":"WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Broken Access Control Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"CodeRevolution","product":"Crawlomatic Multisite Scraper Post Generator","kev":false,"epss":0.00295,"kevAdded":null},{"id":"CVE-2025-4391","published":"2025-05-17T05:30:33.888Z","updated":"2026-04-08T17:00:51.207Z","title":"Echo RSS Feed Post Generator <= 5.4.8.1 - Unauthenticated Arbitrary File Upload","severity":"CRITICAL","score":9.8,"vendor":"CodeRevolution","product":"Echo RSS Feed Post Generator","kev":false,"epss":0.00793,"kevAdded":null},{"id":"CVE-2025-4389","published":"2025-05-17T05:30:33.140Z","updated":"2026-04-08T16:36:26.068Z","title":"Crawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unauthenticated Arbitrary File Upload","severity":"CRITICAL","score":9.8,"vendor":"CodeRevolution","product":"Crawlomatic Multipage Scraper Post Generator","kev":false,"epss":0.0108,"kevAdded":null},{"id":"CVE-2024-13882","published":"2025-03-08T08:22:56.807Z","updated":"2026-04-08T17:00:30.475Z","title":"Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload","severity":"HIGH","score":8.8,"vendor":"CodeRevolution","product":"Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit","kev":false,"epss":0.00759,"kevAdded":null},{"id":"CVE-2024-13816","published":"2025-03-08T08:22:56.377Z","updated":"2026-04-08T16:58:45.561Z","title":"Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions","severity":"MEDIUM","score":5.4,"vendor":"CodeRevolution","product":"Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2024-51681","published":"2024-11-04T14:13:30.442Z","updated":"2026-04-28T16:10:34.888Z","title":"WordPress WP Pocket URLs plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"CodeRevolution","product":"WP Pocket URLs","kev":false,"epss":0.00276,"kevAdded":null},{"id":"CVE-2024-9265","published":"2024-10-01T08:30:18.477Z","updated":"2026-04-08T17:19:39.747Z","title":"Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation","severity":"CRITICAL","score":9.8,"vendor":"CodeRevolution","product":"Echo RSS Feed Post Generator","kev":false,"epss":0.00619,"kevAdded":null},{"id":"CVE-2024-5969","published":"2024-07-27T07:33:46.658Z","updated":"2026-04-08T17:19:12.064Z","title":"AIomatic - Automatic AI Content Writer <= 2.0.5 - Unauthenticated Arbitrary Email Sending","severity":"MEDIUM","score":5.8,"vendor":"CodeRevolution","product":"Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit","kev":false,"epss":0.00349,"kevAdded":null},{"id":"CVE-2024-34435","published":"2024-06-09T11:57:35.799Z","updated":"2026-04-28T16:09:48.916Z","title":"WordPress Aiomatic plugin <= 1.9.3 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"CodeRevolution","product":"Aiomatic","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2024-31290","published":"2024-05-17T08:54:36.992Z","updated":"2026-04-28T16:09:30.316Z","title":"WordPress Demo My WordPress plugin <= 1.0.9.1 - Unauthenticated Privilege Escalation vulnerability","severity":"CRITICAL","score":9.8,"vendor":"CodeRevolution","product":"Demo My WordPress","kev":false,"epss":0.00501,"kevAdded":null},{"id":"CVE-2024-25917","published":"2024-04-25T08:39:27.195Z","updated":"2026-04-28T16:09:13.624Z","title":"WordPress WP Setup Wizard plugin <= 1.0.8.1 - Auth. Full Database Download Vulnerability","severity":"HIGH","score":8.8,"vendor":"CodeRevolution","product":"WP Setup Wizard","kev":false,"epss":0.00644,"kevAdded":null},{"id":"CVE-2023-49176","published":"2023-12-15T14:20:30.610Z","updated":"2026-04-28T16:08:56.265Z","title":"WordPress WP Pocket URLs Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)","severity":"HIGH","score":7.1,"vendor":"CodeRevolution","product":"WP Pocket URLs","kev":false,"epss":0.00403,"kevAdded":null}]}