PT-2026-3229 · WordPress · Getgenie

Youcef Hamdani · CVE-2026-1003 · Publicado 2026-01-16 · Atualizado 2026-01-16

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions GetGenie versions prior to 4.3.1

Description The GetGenie plugin for WordPress has an authorization issue. The plugin does not correctly confirm a user’s permission to delete specific posts. This allows authenticated attackers with Author-level access or higher to delete any post on the WordPress site, even those created by other users.

Recommendations Update GetGenie to version 4.3.1 or later.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-1003

Produtos afetados

Getgenie

Referências · 6

• https://wordfence.com/threat-intel/vulnerabilities/id/38ec647a-3c0c-4d3c-ba34-64c17803867b?source=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-1003 · Nota de Segurança
• https://twitter.com/CVEnew/status/2012126438166495617 · Publicação no Twitter
• https://plugins.trac.wordpress.org/changeset/3436920 · Nota
• https://twitter.com/VulmonFeeds/status/2012081758791991631 · Publicação no Twitter
• https://plugins.trac.wordpress.org/browser/getgenie/trunk/app/Api/GetGenieChat.php#L153 · Nota