Security
فارسی
All products

woo-bulk-editor

WordPress · Plugin
27 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) <= 1.2.2 - Missing AuthorizationCVE-2026-95526 woo-bulk-editor WordPress Medium Fix reported
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Authenticated (Custom Role+) Insecure Direct Object ReferenceCVE-2026-84025 woo-bulk-editor WordPress Medium Fix reported
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Cross-Site Request ForgeryCVE-2026-84024 woo-bulk-editor WordPress Medium Fix reported
BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) < 1.2.2 - Cross-Site Request ForgeryCVE-2026-84023 woo-bulk-editor WordPress Medium Fix reported
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term DeletionCVE-2026-1673 woo-bulk-editor WordPress Medium Fix reported
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data ModificationCVE-2026-1672 woo-bulk-editor WordPress Medium Fix reported
BEAR <= 1.1.7.1 - Authenticated (Shop manager+) SQL InjectionCVE-2026-45213 woo-bulk-editor WordPress Medium Fix reported
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.8 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-57320 woo-bulk-editor WordPress High Fix reported
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request ForgeryCVE-2026-27415 woo-bulk-editor WordPress Medium Fix reported
BEAR <= 1.1.4.4 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2025-26775 woo-bulk-editor WordPress Medium Fix reported
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.4.2 - Reflected Cross-Site ScriptingCVE-2024-30200 woo-bulk-editor WordPress Medium Fix reported
BEAR <= 1.1.4.1 & WOLF <= 1.0.8.1 - Cross-Site Request Forgery to Notice DismissalCVE-2024-31430 bulk-editorwoo-bulk-editor WordPress Medium Fix reported
BEAR <= 1.1.4.3 - Missing AuthorizationCVE-2024-30463 woo-bulk-editor WordPress Medium Fix reported
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin OptionsCVE-2024-24834 woo-bulk-editor WordPress Medium Fix reported
BEAR <= 1.1.4 - Missing Authorization via Several FunctionsCVE-2024-24835 woo-bulk-editor WordPress Medium Fix reported
BEAR <= 1.1.3.3 - Missing Authorization to Product ManipulationCVE-2023-4938 woo-bulk-editor WordPress Medium Fix reported
BEAR <= 1.1.3.3 - Missing Authorization to Product ManipulationCVE-2023-4941 woo-bulk-editor WordPress Medium Fix reported
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product DeletionCVE-2023-4926 woo-bulk-editor WordPress Medium Fix reported
BEAR <= 1.1.3.1 - Cross-Site Request Forgery via Multiple FunctionsCVE-2023-33314 woo-bulk-editor WordPress Medium Fix reported
BEAR <= 1.1.3.3 - Missing Authorization to Product DeletionCVE-2023-4924 woo-bulk-editor WordPress Medium Fix reported