Aimogen Pro WordPress Plugin Unauthenticated Privilege Escalation Vulnerability

A vulnerability in the Aimogen Pro plugin for WordPress, affecting all versions through 2.7.5, allows for unauthenticated privilege escalation. This is due to a missing capability check on the 'aiomatic_call_ai_function_realtime' function, which enables attackers to call arbitrary WordPress functions. Exploitation of this vulnerability could involve using the 'update_option' function to change the default user role for new registrations to administrator, thereby granting administrative access to the attacker.

Impact

Exploitation of this vulnerability could lead to unauthorized administrative access on the affected WordPress site.

Remediation

Users are advised to update the Aimogen Pro plugin to version 2.7.6 or later.