Aiomatic Automatic Ai Content Writer & Editor, Gpt 3 & Gpt 4, Chatgpt Chatbot & Ai Toolkit
Approved changes feed: RSS · Atom
cpe:2.3:a:coderevolution:aiomatic_-_automatic_ai_content_writer_&_editor,_gpt-3_&_gpt-4,_chatgpt_chatbot_&_ai_toolkit:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Coderevolution (32b31726-d241-548e-8113-38e65f899083) |
|---|---|
| Product | Aiomatic Automatic Ai Content Writer & Editor, Gpt 3 & Gpt 4, Chatgpt Chatbot & Ai Toolkit (c9776a5e-66f0-5159-9f79-17abf2ad7810) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6206 |
vulnerable | 2026-06-08 07:43:14.537798 |
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload
HIGH (7.5)
The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomatic_image_editor_ajax_submit' function in all versions up to, and including, 2.5.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. In order to exploit the vulnerability, there must be a value entered for the Stability.AI API key. The value can be arbitrary.
Published: 2025-06-24T08:23:55.136Z
Updated: 2026-04-08T17:06:16.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5969 |
vulnerable | 2026-06-08 06:56:18.101833 |
AIomatic - Automatic AI Content Writer <= 2.0.5 - Unauthenticated Arbitrary Email Sending
MEDIUM (5.8)
The AIomatic - Automatic AI Content Writer for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 2.0.5. This is due to insufficient limitations on the email recipient and the content in the 'aiomatic_send_email' function which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content to any recipient.
Published: 2024-07-27T07:33:46.658Z
Updated: 2026-04-08T17:19:12.064Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13882 |
vulnerable | 2026-06-08 06:25:38.689006 |
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload
HIGH (8.8)
The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomatic_generate_featured_image' function in all versions up to, and including, 2.3.8. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Published: 2025-03-08T08:22:56.807Z
Updated: 2026-04-08T17:00:30.475Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13816 |
vulnerable | 2026-06-08 06:25:38.550530 |
Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions
MEDIUM (5.4)
The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 2.3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and delete posts, list and delete batches, list assistant uploaded files, delete personas, delete forms, delete templates, and clear logs. The vulnerability was partially patched in version 2.3.5.
Published: 2025-03-08T08:22:56.377Z
Updated: 2026-04-08T16:58:45.561Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.