Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: CodeRevolution Component: Aiomatic Clear all filters
TI-2025-05614 CVE-2025-6206 · GHSA-w656-5j2g-vmwh

Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload

Priority LOW 36

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomatic_image_edi…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00542 Published 2025-06-24 No fix listed CWE-434
TI-2024-12903 CVE-2024-13882 · GHSA-rxh8-h3wr-3h4r

Unrestricted file upload in CodeRevolution Aiomatic - Automatic AI Content Writer &…

Priority MEDIUM 41

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomatic_generate_…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00759 Published 2025-03-08 No fix listed CWE-434
TI-2024-12842 CVE-2024-13816 · GHSA-fxrj-98xj-j69p

Missing authorization in CodeRevolution Aiomatic - Automatic AI Content Writer & Editor…

Priority LOW 24

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00238 Published 2025-03-08 No fix listed CWE-862