CodeRevolution vulnerabilities
We track 12 vulnerabilities in CodeRevolution products across 9 products. 12 are rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2026.
Latest CodeRevolution vulnerabilities
- 9.8 Critical severity
Aimogen Pro - All-in-One AI Content Writer…: Improper Privilege Management
The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. This is due to due to a missing capability check on the 'aiomatic_call_
- 10.0 Critical severity
Aimogen Pro: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen-pro allows Using Malicious Files.This issue affects Aimogen Pro: from n/a through <= 2.8.3.
- 8.8 High severity
Crawlomatic Multipage Scraper Post Generator: Unrestricted Upload of File with Dangerous Type
The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.7.2 via the filter_content function. This is due to passing the attacker-supplied 'callback_raw' shortcode attr
- 9.8 Critical severity
Aimogen Pro - All-in-One AI Content Writer…: Missing Authorization
The Aimogen Pro plugin for WordPress is vulnerable to Arbitrary Function Call that can lead to privilege escalation due to a missing capability check on the 'aiomatic_call_ai_function_realtime' function in all versions up to, and including, 2.7.5. This makes i
- 7.5 High severity
Aiomatic - Automatic AI Content Writer &…: Unrestricted Upload of File with Dangerous Type
The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomatic_image_editor_ajax_submit' function in all version
- 7.1 High severity
Echo RSS Feed Post Generator Plugin for…: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRevolution Echo RSS Feed Post Generator Plugin for WordPress rss-feed-post-generator-echo allows Reflected XSS.This issue affects Echo RSS Feed Post Gener
- 9.8 Critical severity
Echo RSS Feed Post Generator: Unrestricted Upload of File with Dangerous Type
The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the echo_generate_featured_image() function in all versions up to, and including, 5.4.8.1. This makes it possible for unauthent
- 9.8 Critical severity
Crawlomatic Multipage Scraper Post Generator: Unrestricted Upload of File with Dangerous Type
The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the crawlomatic_generate_featured_image() function in all versions up to, and including, 2.6.8.1. This makes it
- 8.8 High severity
Aiomatic - Automatic AI Content Writer &…: Unrestricted Upload of File with Dangerous Type
The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomatic_generate_featured_image' function in all versions
- 9.8 Critical severity
Echo RSS Feed Post Generator: Improper Privilege Management
The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.4.6. This is due to the plugin not properly restricting the roles that can set during registration through the echo_check_post_h
- 9.8 Critical severity
Demo My WordPress: Improper Privilege Management
Improper Privilege Management vulnerability in CodeRevolution Demo My WordPress allows Privilege Escalation.This issue affects Demo My WordPress: from n/a through 1.0.9.1.
- 8.8 High severity
WP Setup Wizard: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodeRevolution WP Setup Wizard.This issue affects WP Setup Wizard: from n/a through 1.0.8.1.