CVE-2026-1003 is an authorization bypass vulnerability (CWE-862) in the GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools WordPress plugin. The flaw exists in all versions up to and including 4.3.0, where the plugin fails to verify that a user is authorized to delete a specific post. As a result, authenticated users with Author-level access or higher can delete posts they do not own. This vulnerability has a CVSS 3.1 base score of 4.3, indicating medium severity. No patch or remediation details have been provided by the vendor or in the advisory.

An attacker with Author-level or higher privileges can delete any post on the WordPress site, including posts created by other users. This could lead to unauthorized content removal and potential disruption of site operations. There is no indication of confidentiality or availability impact beyond the deletion of posts. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit Author-level access to trusted users only and monitor user activities related to post deletions. Avoid granting unnecessary privileges to users to reduce risk.