Threat Database

Threat Entry Updated 2026-07-17

Aimogen Pro - Privilege Escalation (CVE-2026-15982)

The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. This is due to due to a missing capability check on the 'aiomatic_call_google_ai_function' function. This makes it possible for unauthenticated attackers to leverage the 'aimogen_wp_god_mode' tool to clear function blacklists and execute arbitrary PHP functions, such as creating administrator accounts.

PLUGIN Aimogen Pro

CVE-2026-15982

CRITICAL CVSS 9.8 2026-07-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Aimogen Pro - Privilege Escalation (CVE-2026-4038)

The Aimogen Pro plugin for WordPress is vulnerable to Arbitrary Function Call that can lead to privilege escalation due to a missing capability check on the 'aiomatic_call_ai_function_realtime' function in all versions up to, and including, 2.7.5. This makes it possible for unauthenticated attackers to call arbitrary WordPress functions such as 'update_option' to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.

PLUGIN Aimogen Pro

CVE-2026-4038

CRITICAL CVSS 9.8 2026-03-20

Risk Score

Open Full Technical Breakdown