WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bulk-featured-image
Published
2025-05-07
Title
Bulk Featured Image <= 1.2.4 - Missing Authorization
Slug
bulk-featured-image
Published
2025-07-04
Title
Bulk Featured Image <= 1.2.2 - Authenticated (Admin+) Arbitrary File Upload
Slug
bulk-featured-image
Published
2025-09-05
Title
Bulk Featured Image <= 1.2.2 - Authenticated (Admin+) Arbitrary File Upload
Slug
bulk-image-alt-text-with-yoast
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulk-image-alt-text-with-yoast
Published
2026-01-08
Title
BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce < 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bulk-image-alt-text-with-yoast
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
bulk-image-resizer
Published
2024-10-17
Title
Bulk images optimizer: Resize, optimize, convert to webp, rename ... <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
Slug
bulk-image-title-attribute
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulk-image-title-attribute
Published
2025-10-04
Title
Bulk Auto Image Title Attribute <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bulk-me-now
Published
2025-01-09
Title
Bulk Me Now <= 2.0 - Reflected XSS
Slug
bulk-me-now
Published
2025-01-09
Title
Bulk Me Now <= 2.0 - Stored XSS via Shortcode
Slug
bulk-me-now
Published
2025-01-09
Title
Bulk Me Now <= 2.0 - Message Deletion via CSRF
Slug
bulk-menu-edit
Published
2025-01-29
Title
Bulk Menu Edit < 1.3.1 - Missing Authorization
Slug
bulk-noindex-nofollow-toolkit-by-mad-fish
Published
2023-10-18
Title
Bulk NoIndex & NoFollow Toolkit < 1.5 - Reflected XSS
Slug
bulk-noindex-nofollow-toolkit-by-mad-fish
Published
2023-09-04
Title
Bulk NoIndex & NoFollow Toolkit < 1.51 - Missing Authorization
Slug
bulk-noindex-nofollow-toolkit-by-mad-fish
Published
2024-03-25
Title
Bulk NoIndex & NoFollow Toolkit < 2.10 - Reflected Cross-Site Scripting via tab, order, and orderby
Slug
bulk-noindex-nofollow-toolkit-by-mad-fish
Published
2024-09-25
Title
Bulk NoIndex & NoFollow Toolkit < 2.16 - Reflected Cross-Site Scripting
Slug
bulk-noindex-nofollow-toolkit-by-mad-fish
Published
2025-04-01
Title
Bulk NoIndex & NoFollow Toolkit < 2.20 - Reflected Cross-Site Scripting
Slug
bulk-page-creator
Published
2022-05-09
Title
Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF
Slug
bulk-page-stub-creator
Published
2025-04-17
Title
Bulk Page Stub Creator < 1.2 - Reflected Cross-Site Scripting
Slug
bulk-resize-media
Published
2023-03-16
Title
Bulk Resize Media <= 1.1 - CSRF
Slug
bulk-role-change
Published
2024-10-28
Title
Bulk Change Role <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Slug
bulk-term-editor
Published
2025-04-16
Title
Bulk Term Editor <= 1.1.4 - Cross-Site Request Forgery
Slug
bulk-user-editor
Published
2025-04-01
Title
Bulk Fields Editor <= 1.8.0 - Missing Authorization
Slug
bulk-watermark
Published
2025-09-05
Title
Bulk Watermark <= 1.6.10 - Cross-Site Request Forgery