Coderevolution develops a focused set of web-application and WordPress-plugin products—including Aiomatic, WP Pocket URLs, and Echo RSS Feed Post Generator—that operate in the content-generation and automation space. Vulnerabilities affecting this vendor's portfolio skew toward serious outcomes and cluster around web-application input handling and file-management flaws: cross-site scripting, improper input validation, unrestricted file uploads, and missing authorization checks that are characteristic of server-side content-processing logic. Defenders should treat updates for these products as priority items, particularly in multi-tenant or user-facing deployments; current severity and exploitation status are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Coderevolution over time
Signals from CVEs in this vendor scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-4391CRITICAL The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the echo_generate_featured_image() function in | May 17, 2025 | 9.8 | 28 | NO | NO |
CVE-2024-9265CRITICAL The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.4.6. This is due to the plugin not properly rest | Oct 1, 2024 | 9.8 | 28 | NO | NO |
CVE-2024-13882HIGH The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file ty | Mar 8, 2025 | 8.8 | 26 | NO | NO |
CVE-2024-34435HIGH Missing Authorization vulnerability in CodeRevolution Aiomatic.This issue affects Aiomatic: from n/a through 1.9.3. | Jun 9, 2024 | 8.8 | 24 | NO | NO |
CVE-2025-6206HIGH The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file ty | Jun 24, 2025 | 7.5 | 22 | NO | NO |
CVE-2024-13816MEDIUM The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to unauthorized access, modification, and loss o | Mar 8, 2025 | 5.4 | 17 | NO | NO |
CVE-2024-51681MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRevolution WP Pocket URLs wp-pocket-urls allows Stored XSS.This issue affe | Nov 4, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-5969MEDIUM The AIomatic - Automatic AI Content Writer for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 2.0.5. This is due to insufficient | Jul 27, 2024 | 5.3 | 17 | NO | NO |
CVE-2023-49176MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRevolution WP Pocket URLs allows Reflected XSS.This issue affects WP Pocke | Dec 15, 2023 | 6.1 | 17 | NO | NO |
Signals from CVEs in this vendor scope (9 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Coderevolution.
Media articles that mention a CVE ID that affects a product developed by Coderevolution — matched by CVE ID, not by vendor name.