Aimogen Pro for WordPress through version 2.8.4 allows unauthenticated privilege escalation because the aiomatic_call_google_ai_function omits a capability check, letting attackers clear blacklists and run arbitrary PHP such as creating admin accounts. Wordfence rates it critical at CVSS 9.8; the CVE reached NVD on July 17, 2026.
Aimogen Pro contains a privilege escalation vulnerability rated CVSS 9.8.
The flaw carries a critical severity rating from Wordfence.
Tap a lens to see what this story means for you.
Reader-supported · The Brief
Liked this? The Brief brings you the whole day in tech, verified, every morning. Two minutes, free forever.
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
NASA and SpaceX are targeting a 7:26 AM EDT Sunday liftoff of a Falcon Heavy from Kennedy Space Center carrying the Nancy Grace Roman Space Telescope. The observatory will travel to Sun-Earth L2, where its Wide Field and Coronagraph instruments will search for exoplanets and study dark energy.
ShinyHunters published data from 12.9 million genuine Carhartt accounts after the apparel company refused a $3.3 million ransom. The breach, which also exposed records for more than 15,000 employees, originated from Carhartt's Databricks analytics platform.
Nvidia has agreed to acquire open-source AI platform Hugging Face for $12.9 billion according to The Information. The deal would expand Nvidia's reach into the software and model ecosystem while highlighting its bet on continued AI demand growth.
