CVE-2026-57719
Received Received - Intake

Unrestricted File Upload in Aimogen Pro

Vulnerability report for CVE-2026-57719, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-07-13

Last updated on: 2026-07-13

Assigner: Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen-pro allows Using Malicious Files.This issue affects Aimogen Pro: from n/a through <= 2.8.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-13
Last Modified
2026-07-13
Generated
2026-07-13
AI Q&A
2026-07-13
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
coderevolution aimogen_pro to 2.8.3 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The vulnerability in the WordPress Aimogen Pro Plugin (version 2.8.3 and below) is an Arbitrary File Upload issue. It allows unauthenticated attackers to upload any type of file, including dangerous or malicious files such as backdoors, to the affected website.

Impact Analysis

This vulnerability can lead to a complete compromise of the affected website. Attackers can upload malicious files that may allow them to execute arbitrary code, gain unauthorized access, manipulate data, or disrupt the availability of the site.

Detection Guidance

This vulnerability allows unauthenticated attackers to upload arbitrary files, including malicious backdoors, to the website. Detection can involve monitoring for unusual file uploads or unexpected files in the Aimogen Pro plugin directories.

Specific commands are not provided in the available resources, but common approaches include checking web server upload directories for suspicious files and reviewing web server logs for unusual POST requests targeting the Aimogen Pro plugin upload endpoints.

Mitigation Strategies

Immediate mitigation steps include updating the Aimogen Pro plugin to version 2.8.3.1 or later, which contains the patch for this vulnerability.

Until the plugin is updated, applying the Patchstack mitigation rule to block attacks targeting this vulnerability is advised.

Additionally, seeking assistance from your hosting provider or a developer to implement temporary protections or monitoring is recommended.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57719. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart