Crawlomatic Multipage Scraper Post Generator vulnerabilities

2 known vulnerabilities in Crawlomatic Multipage Scraper Post Generator from CodeRevolution. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Crawlomatic Multipage Scraper Post Generator: Unrestricted Upload of File with Dangerous Type

  CVE-2026-9009May 28, 2026CodeRevolution

  The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.7.2 via the filter_content function. This is due to passing the attacker-supplied 'callback_raw' shortcode attr

• 9.8 Critical severity

  Crawlomatic Multipage Scraper Post Generator: Unrestricted Upload of File with Dangerous Type

  CVE-2025-4389May 17, 2025CodeRevolutionEPSS 1.08%

  The Crawlomatic Multipage Scraper Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the crawlomatic_generate_featured_image() function in all versions up to, and including, 2.6.8.1. This makes it