CVE-2026-15982
CRITICAL
CVSS 9.8
aimogen_pro_all_in_one_ai_content_writer_editor_chatbot_automation_toolkit
Verified Advisory
Privilege escalation in Aimogen Pro WordPress plugin (CVE-2026-15982)
Privilege Escalation
WordPress
PHP
Aimogen Pro All In One Ai Content Writer Editor Chatbot Automation Toolkit
CVE-2026-15982 is a critical privilege escalation vulnerability (CVSS 9.8) in the Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress. The vulnerability stems from a missing capability check on the 'aiomatic_call_google_ai_function' function, allowing unauthenticated attackers to invoke the 'aimogen_wp_god_mode' tool to clear function blacklists and execute arbitrary PHP functions, including the creation of administrator accounts.
Affected versions:
- <= 2.8.4
We recommend updating to: 2.8.5.
CVSS 9.8 · our assessment: act_now
Vendor advisory: https://www.wordfence.com/threat-intel/vulnerabilities/id/53cc91fa-51fd-4d16-b740-a48f8d446b5d?source=cve
Details: https://vuln.today/cve/CVE-2026-15982
Verified by vuln.today against published advisories.
Affected versions
- – <= 2.8.4
Fixed in: 2.8.5