CyberSecBulletin

GenieWords vulnerabilities

We track 1 vulnerability in GenieWords products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest GenieWords vulnerabilities

  • 8.8 High severity

    GenieWords: Missing Authorization

    CVE-2026-74933GenieWords

    The GenieWords WordPress plugin from 1.5.27 to 1.5.34 does not have authorisation checks on some of its REST API and AJAX actions, and decodes stored values before printing them, allowing unauthenticated users to overwrite its configuration and inject arbitrar