PT-2026-3229 · WordPress · Getgenie

Youcef Hamdani · Published 2026-01-16 · Updated 2026-01-16 · CVE-2026-1003

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions GetGenie versions prior to 4.3.1

Description The GetGenie plugin for WordPress has an authorization issue. The plugin does not correctly confirm a user’s permission to delete specific posts. This allows authenticated attackers with Author-level access or higher to delete any post on the WordPress site, even those created by other users.

Recommendations Update GetGenie to version 4.3.1 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-1003

Affected Products

Getgenie

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-1003 · Security Note
• https://wordfence.com/threat-intel/vulnerabilities/id/38ec647a-3c0c-4d3c-ba34-64c17803867b?source=cve · Note
• https://twitter.com/CVEnew/status/2012126438166495617 · Twitter Post
• https://plugins.trac.wordpress.org/changeset/3436920 · Note
• https://twitter.com/VulmonFeeds/status/2012081758791991631 · Twitter Post
• https://plugins.trac.wordpress.org/browser/getgenie/trunk/app/Api/GetGenieChat.php#L153 · Note