Plugin icon

WP Bulk Delete

wp-bulk-delete

Vulnerabilities:

3

Last Updated:

August 13, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-07-15
Title
WP Bulk Delete < 1.4.3 - Authenticated (Administrator+) SQL Injection via 'delete_user_roles' Parameter
Fixed in
Fixed in 1.4.3
CVSS
4.9 (medium)
Published
2025-08-27
Title
WP Bulk Delete < 1.3.7 - Missing Authorization
Fixed in
Fixed in 1.3.7
CVSS
4.3 (medium)
Published
2024-09-30
Title
WP Bulk Delete < 1.3.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.3.2
CVSS
6.1 (medium)