MagniGenie vulnerabilities and threats

10 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.8		CVE-2026-125784RestroPress (WordPress plugin) · Cross-Site Request Forgery (CSRF) High8.82026-11-11CVE Database V5CVE-2026-125784 CVE-2026-125784 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Magnigenie RestroPress versions prior to 3.5.0. This flaw allows an attacker to trick authenticated users into performing unwanted actions on the application. The vulnerability is rated high severity with a CVSS score of 8.8, indicating significant potential impact on confidentiality, integrity, and availability. A fix is available in version 3.5.0. Vulnerability Magnigenie	CVE Database V5	2026-11-11
Medium	5.3	EPSS 0.2%	CVE-2025-62129RestroPress (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2025-12-31CVE Database V5CVE-2025-62129 Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through <= 3.2.7. EPSS 0.2%Vulnerability Magnigenie	CVE Database V5	2025-12-31
Medium	6.5	EPSS 0.2%	CVE-2025-69017RestroPress (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-30CVE Database V5CVE-2025-69017 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magnigenie RestroPress restropress allows Stored XSS.This issue affects RestroPress: from n/a through <= 3.2.8.6. EPSS 0.2%Vulnerability Magnigenie	CVE Database V5	2025-12-30
Medium	6.5	EPSS 0.2%	CVE-2025-66100RestroPress (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.2%2025-12-18CVE Database V5CVE-2025-66100 Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through <= 3.2.3.5. EPSS 0.2%Vulnerability Magnigenie	CVE Database V5	2025-12-18
Critical	9.8	EPSS 2.3%	CVE-2025-9209RestroPress (WordPress plugin) · Information Exposure Critical9.8EPSS 2.3%2025-10-03CVE Database V5CVE-2025-9209 The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated attackers to forge JWT tokens for other users, including administrators, and authenticate as them. EPSS 2.3%Vulnerability magnigenie CWE-200	CVE Database V5	2025-10-03
High	7.1	EPSS 0.4%	CVE-2025-32553RestroPress (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2025-04-11CVE Database V5CVE-2025-32553 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magnigenie RestroPress restropress allows Reflected XSS.This issue affects RestroPress: from n/a through <= 3.2.8.4. EPSS 0.4%Vulnerability Magnigenie	CVE Database V5	2025-04-11
High	8.5	EPSS 0.4%	CVE-2025-32687Review Stars Count For WooCommerce (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2025-04-10CVE Database V5CVE-2025-32687 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Magnigenie Review Stars Count For WooCommerce review-stars-count-for-woocommerce allows SQL Injection.This issue affects Review Stars Count For WooCommerce: from n/a through <= 2.0. EPSS 0.4%Vulnerability Magnigenie	CVE Database V5	2025-04-10
Medium	4.3	EPSS 0.3%	CVE-2025-31877RestroPress (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2025-04-01CVE Database V5CVE-2025-31877 Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through <= 3.2.8. EPSS 0.3%Vulnerability Magnigenie	CVE Database V5	2025-04-01
Medium	6.5	EPSS 0.3%	CVE-2024-35719RestroPress (WordPress plugin) · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-06-08CVE Database V5CVE-2024-35719 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagniGenie RestroPress allows Stored XSS.This issue affects RestroPress: from n/a through 3.1.2.1. EPSS 0.3%Vulnerability MagniGenie CWE-79	CVE Database V5	2024-06-08
Medium	5.4	EPSS 0.2%	CVE-2024-32449RestroPress (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.2%2024-04-15CVE Database V5CVE-2024-32449 Cross-Site Request Forgery (CSRF) vulnerability in MagniGenie RestroPress.This issue affects RestroPress: from n/a through 3.1.2. EPSS 0.2%Vulnerability MagniGenie CWE-352	CVE Database V5	2024-04-15

Page 1 of 1