Skip to content
Noroxi

CodeRevolution records

9 published records for vendor coderevolution.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
44.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

9 records
  • CVE-2024-9265
    39Monitor

    Echo RSS Feed Post Generator <= 5.4.6 - Unauthenticated Privilege Escalation

    CriticalCVSS 9.8No exploitEPSS 1%

    coderevolution · echo rss feed post generatorOct 1, 2024

  • CVE-2024-31290
    39Monitor

    WordPress Demo My WordPress plugin <= 1.0.9.1 - Unauthenticated Privilege Escalation vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    coderevolution · demo my wordpressMay 17, 2024

  • CVE-2024-13882
    35Monitor

    Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.8 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 1%

    coderevolution · aiomaticMar 8, 2025

  • CVE-2024-34435
    35Monitor

    WordPress Aiomatic plugin <= 1.9.3 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    coderevolution · aiomaticJun 9, 2024

  • CVE-2025-6206
    30Monitor

    Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.5.0 - Authenticated (Subscriber+) Arbitrary File Upload

    HighCVSS 7.5No exploitEPSS 1%

    coderevolution · aiomaticJun 24, 2025

  • CVE-2023-49176
    24Monitor

    WordPress WP Pocket URLs Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    coderevolution · wp pocket urlsDec 15, 2023

  • CVE-2024-5969
    21Monitor

    AIomatic - Automatic AI Content Writer <= 2.0.5 - Unauthenticated Arbitrary Email Sending

    MediumCVSS 5.3No exploitEPSS 0%

    coderevolution · aiomaticJul 27, 2024

  • CVE-2024-51681
    21Monitor

    WordPress WP Pocket URLs plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    coderevolution · wp pocket urlsNov 4, 2024

  • CVE-2024-13816
    21Monitor

    Aiomatic - AI Content Writer, Editor, ChatBot & AI Toolkit <= 2.3.6 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions

    MediumCVSS 5.4No exploitEPSS 0%

    coderevolution · aiomaticMar 8, 2025