PatchSiren

genolve CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH genolve CVE published 2026-07-11

CVE-2026-1359

The Genolve – AI image AI video generation plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the genolve_setOpt() function in all versions up to, and including, 5.0.5. This vulnerability allows authenticated attackers with Contributor-level access and above to update arbitrary WordPress options, potentially leading to privilege escalation. The vul [truncated]