roxnor Vulnerabilities and Affected Products
Vulnerabilities associated with GetGenie.
Products
Clear product- MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor23 vulnerabilities
- ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor19 vulnerabilities
- Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers5 vulnerabilities
- EmailKit – Email Customizer for WooCommerce & WP4 vulnerabilities
- FundEngine4 vulnerabilities
- Wp Social Login and Register Social Counter4 vulnerabilities
- GetGenie3 vulnerabilities
- GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools3 vulnerabilities
- Metform3 vulnerabilities
- ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution3 vulnerabilities
- Wp Ultimate Review3 vulnerabilities
- ElementsKit Elementor addons Lite2 vulnerabilities
- PopupKit2 vulnerabilities
- EmailKit1 vulnerability
- FundEngine – Donation and Crowdfunding Platform1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-65440HIGH | WordPress GetGenie plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerabilityUnauthenticated Cross Site Scripting (XSS) in GetGenie <= 4.4.3 versions. CWE-79Jul 27, 2026 | CVSS7.1v3.1 | EPSS0.146% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-57316MEDIUM | WordPress GetGenie plugin <= 4.4.2 - Sensitive Data Exposure vulnerabilitySubscriber Sensitive Data Exposure in GetGenie <= 4.4.2 versions. CWE-497Jun 26, 2026 | CVSS6.5v3.1 | EPSS0.345% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24356MEDIUM | WordPress GetGenie plugin <= 4.3.0 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Roxnor GetGenie getgenie allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetGenie: from n/a through <= 4.3.0. CWE-862Jan 22, 2026 | CVSS4.9v3.1 | EPSS0.232% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |