Arbitrary File Upload Vulnerability in Aiomatic AI Content Writer Plugin for WordPress
CVE-2024-13882
8.8HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 8 March 2025
What is CVE-2024-13882?
The Aiomatic - Automatic AI Content Writer & Editor for WordPress has a vulnerability that allows authenticated users with Contributor-level access or higher to upload arbitrary files due to inadequate file type validation in the 'aiomatic_generate_featured_image' function. This could potentially lead to remote code execution on the server, compromising the integrity and security of the affected site.
Affected Version(s)
Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit * <= 2.3.8