CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-15982 — The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Too...

·Source: NIST NVD

Updated:

Executive Summary

The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. This is due to due to a missing capability check on the 'aiomatic_call_google_ai_function' function. This makes it possible for unauthenticated attackers to leverage the 'aimogen_wp_god_mode' tool to clear funct

Analysis

The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.8.4. This is due to due to a missing capability check on the 'aiomatic_call_google_ai_function' function. This makes it possible for unauthenticated attackers to leverage the 'aimogen_wp_god_mode' tool to clear function blacklists and execute arbitrary PHP functions, such as creating administrator accounts. CVSS Score: 9.8. Published: 2026-07-17T06:16:36.560.

Indicators of Compromise (1)

CVE (1)
CVE-2026-15982
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 17, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

More than 1,000 domains illegally streaming World Cup games seized, DOJ says

Over the course of the World Cup tournament, the Department of Justice seized more than 1,000 domains for illegally streaming games.

The Record
MEDIUMVulnerability

Banks and Telecoms Are Struggling to Share Scam Data

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/banks-telecoms-are-struggling-to-share-scam-data-image_small-1-a-32267.jpg" align=right hspace=4><b>Canadian Cyber Exchange's Jennifer Quaid on Privacy Hurdles, Real-Time Fraud Intel</b><br>Banks, telecoms and tech platforms all want to share scam data faster, but privacy rules and regulatory limits are standing in the way, said J

Bank Info Security
MEDIUMVulnerability

Top Five Compliance Audit Software and Tools: Mastering Modern Regulatory Risk

Executive Summary Manual audit preparation no longer scales across hybrid, cloud, endpoint, and application environments. Compliance monitoring software must move from checklist validation to continuous control monitoring. The strongest platforms connect evidence collection with risk prioritization, remediation ownership, and executive reporting. Qualys differentiates itself by enabling continuous

Qualys Blog