Log in Start free

CodeRevolution

Products

ProductCVEsExploitedLatest
Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit4–Jun 24, 2025
Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit2–Jul 17, 2026
Echo RSS Feed Post Generator2–May 17, 2025
WP Pocket URLs2–Nov 4, 2024
Crawlomatic Multipage Scraper Post Generator2–May 28, 2026
Crawlomatic Multisite Scraper Post Generator2–Jun 6, 2025
WP Setup Wizard1–Apr 25, 2024
Aiomatic1–Jun 9, 2024
Demo My WordPress1–May 17, 2024
Echo RSS Feed Post Generator Plugin for WordPress1–Jun 17, 2025
Aimogen Pro1–Jul 13, 2026

Exploited and recent CVEs

  • CVE-2026-15982 Critical 9.8 Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit <= 2.8.4 - Unauthenticated Privilege Escalation via 'aiomatic_call_google_ai_function' 0.5%
  • CVE-2026-57719 Critical 10.0 WordPress Aimogen Pro plugin <= 2.8.3 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2026-9009 High 8.8 Crawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute 0.4%
  • CVE-2026-4038 Critical 9.8 Aimogen Pro <= 2.7.5 - Unauthenticated Privilege Escalation via Arbitrary Function Call 0.3%
  • CVE-2025-6206 High 7.5 Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload 0.5%
  • CVE-2025-49312 High 7.1 WordPress Echo RSS Feed Post Generator Plugin for WordPress plugin <= 5.4.8.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-49294 Medium 5.3 WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Sensitive Data Exposure via Log Exposure vulnerability 0.4%
  • CVE-2025-49293 Medium 4.3 WordPress Crawlomatic Multisite Scraper Post Generator plugin <= 2.6.8.2 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-4391 Critical 9.8 Echo RSS Feed Post Generator <= 5.4.8.1 - Unauthenticated Arbitrary File Upload 0.8%
  • CVE-2025-4389 Critical 9.8 Crawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unauthenticated Arbitrary File Upload 1.1%
  • CVE-2024-13882 High 8.8 Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload 0.8%
  • CVE-2024-13816 Medium 5.4 Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions 0.2%
  • CVE-2024-51681 Medium 6.5 WordPress WP Pocket URLs plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-9265 Critical 9.8 Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation 0.6%
  • CVE-2024-5969 Medium 5.8 AIomatic - Automatic AI Content Writer <= 2.0.5 - Unauthenticated Arbitrary Email Sending 0.3%
  • CVE-2024-34435 Medium 4.3 WordPress Aiomatic plugin <= 1.9.3 - Broken Access Control vulnerability 0.3%
  • CVE-2024-31290 Critical 9.8 WordPress Demo My WordPress plugin <= 1.0.9.1 - Unauthenticated Privilege Escalation vulnerability 0.5%
  • CVE-2024-25917 High 8.8 WordPress WP Setup Wizard plugin <= 1.0.8.1 - Auth. Full Database Download Vulnerability 0.6%
  • CVE-2023-49176 High 7.1 WordPress WP Pocket URLs Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS) 0.4%