CVE-2024-13882

The CVE-2024-13882 entry for Aiomatic (WordPress plugin) is supported by multiple connected sources indicating a concrete vulnerability: arbitrary file uploads due to missing file-type validation in aiomatic_generate_featured_image in all versions up to 2.3.8, exploitable by authenticated users w...

CVE-2024-34435

CVE-2024-34435 affects CodeRevolution Aiomatic (Aiomatic) for WordPress, with a Missing Authorization vulnerability in Aiomatic versions up to and including 1.9.3. Root cause: missing authorization checks allow unauthorized access. Impact: potential unauthorized access to Aiomatic functionality; ...