CVE-2026-57719
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
The Aimogen Pro WordPress plugin contains an unrestricted file upload vulnerability with dangerous file types. This allows an attacker to upload malicious files, potentially leading to remote code execution.
Risk Assessment
The organization is at risk of server compromise through the upload and execution of malicious files (e.g., webshells), which could result in data loss or further attacks on the infrastructure.
Recommendation
Immediately update the Aimogen Pro plugin to a version newer than 2.8.3 if available, or temporarily disable the plugin until a patch is released.
Original NVD description (English source)
Unrestricted Upload of File with Dangerous Type vulnerability in CodeRevolution Aimogen Pro aimogen-pro allows Using Malicious Files.This issue affects Aimogen Pro: from n/a through <= 2.8.3.