Lucene search
+L

52 matches found

Cvelist
Cvelist
added 2026/01/22 4:52 p.m.32 views

CVE-2026-24356 WordPress GetGenie plugin <= 4.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Roxnor GetGenie getgenie allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetGenie: from n/a through = 4.3.0...

4.9CVSS0.00242EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.15 views

WordPress plugin GetGenie has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.9CVSS5.8AI score0.00242EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.16 views

PT-2026-4252

Missing Authorization vulnerability in Roxnor GetGenie getgenie allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetGenie: from n/a through = 4.3.0...

5.4AI score0.00242EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/17 8:19 a.m.18 views

CVE-2026-1003

The GetGenie plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.3.0. This is due to the plugin not properly verifying that a user is authorized to delete a specific post. This makes it possible for authenticated attackers, with Author-level access a...

4.3CVSS5.8AI score0.00217EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/16 8:15 a.m.17 views

CVE-2026-1003

The GetGenie plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.3.0. This is due to the plugin not properly verifying that a user is authorized to delete a specific post. This makes it possible for authenticated attackers, with Author-level access a...

4.3CVSS0.00217EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/16 7:23 a.m.32 views

CVE-2026-1003

CVE-2026-1003 affects GetGenie – AI Content Writer for WordPress, with authorization bypass allowing an Author+ authenticated user to delete posts they do not own in all versions up to 4.3.0. Connected sources confirm the issue and that Wordfence lists a patched status and a fix path; remediation...

4.3CVSS5.4AI score0.00217EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/16 7:23 a.m.7 views

CVE-2026-1003

The GetGenie plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.3.0. This is due to the plugin not properly verifying that a user is authorized to delete a specific post. This makes it possible for authenticated attackers, with Author-level access a...

4.3CVSS5.3AI score0.00217EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/01/16 7:23 a.m.31 views

CVE-2026-1003 GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools <= 4.3.0 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion

The GetGenie plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.3.0. This is due to the plugin not properly verifying that a user is authorized to delete a specific post. This makes it possible for authenticated attackers, with Author-level access a...

4.3CVSS0.00217EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/16 7:23 a.m.4 views

CVE-2026-1003 GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools <= 4.3.0 - Missing Authorization to Authenticated (Author+) Arbitrary Post Deletion

The GetGenie plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.3.0. This is due to the plugin not properly verifying that a user is authorized to delete a specific post. This makes it possible for authenticated attackers, with Author-level access a...

4.3CVSS5.4AI score0.00217EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/16 12:00 a.m.21 views

PT-2026-3229

The GetGenie plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.3.0. This is due to the plugin not properly verifying that a user is authorized to delete a specific post. This makes it possible for authenticated attackers, with Author-level access a...

4.3CVSS5.8AI score0.00217EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/16 12:00 a.m.14 views

WordPress plugin GetGenie has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00217EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/01/05 10:37 a.m.13 views

WordPress GetGenie plugin <= 4.3.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin GetGenie versions = 4.3.0...

8.8CVSS5.4AI score0.00242EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder