CVE-2024-13816

creationtimestamp| type| source ---|---|--- 2025-03-08 08:37:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6933 2025-03-08 11:00:22+00:00| seen| https://t.me/cvedetector/19888 2025-03-08 12:35:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljujwnrqvg26 2025-03-08...

CVE-2024-13816

The CVE-2024-13816 entry covers Aiomatic – Automatic AI Content Writer & Editor (WordPress plugin) with vulnerable versions up to 2.3.6, where missing capability checks allow authenticated users with Subscriber-level access and above to perform multiple administrator actions (update/delete posts,...

CVE-2024-13816 Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 2.3.6. This mak...