VulnSocial

CVE-2026-15982Disclosure

LOWCVSS 9.8 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. This is due to due to a missing capability check on the 'aiomatic_call_google_ai_function' function. This makes it possible for unauthenticated attackers to leverage the 'aimogen_wp_god_mode' tool to clear function blacklists and execute arbitrary PHP functions, such as creating administrator accounts.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-269

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-07-17: 3Patch / Workaround · 2026-07-17: 1Technical Details · 2026-07-17: 307-17
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
By indicator
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-15982 The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to,… https://www.cve.org/CVERecord?id=CVE-2026-15982

    Post summary

    The CVE-2026-15982 affects the Aimogen Pro WordPress plugin, allowing privilege escalation in all versions, with no exploitation details, PoC, or patch information provided.

    00010904
    57.8K followersView on X
  • Orizon@OrizonCyber
    Patch

    🚨 CVE-2026-15982 — CVSS 9.8/10 ██████████ The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/AD9sm4ELVf

    Post summary

    The post announces CVE-2026-15982 as a critical vulnerability in the Aimogen Pro WordPress plugin with a CVSS score of 9.8/10, and urges users to apply the available patch – no PoC, exploit, or active exploitation details are provided.

    1000085
    68 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-15982 The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to,… https://www.cve.org/CVERecord?id=CVE-2026-15982 ----- Traducción: CVE-2026-15982 El … http://infoflow.cloud`

    Post summary

    The post announces the discovery of a privilege‑escalation vulnerability (CVE‑2026‑15982) affecting all versions of the Aimogen Pro WordPress plugin.

    0000032
    92 followersView on X

Explore more

Back to dashboard