WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bulk-editor
Published
2023-10-17
Title
WOLF < 1.0.7.2 - Cross-Site Request Forgery (CSRF)
Slug
bulk-editor
Published
2024-01-16
Title
WOLF < 1.0.8.1 - Unauthenticated Stored Cross-Site Scripting via profile_title
Slug
bulk-editor
Published
2024-01-30
Title
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.8.2 - Missing Authorization
Slug
bulk-editor
Published
2024-01-30
Title
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.8.2 - Cross-Site Request Forgery
Slug
bulk-editor
Published
2024-04-10
Title
BEAR <= 1.1.4.1 & WOLF <= 1.0.8.1 - Cross-Site Request Forgery to Notice Dismissal
Slug
bulk-editor
Published
2024-05-07
Title
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
bulk-editor
Published
2024-11-11
Title
WOLF < 1.0.8.4 - Authenticated (Editor+) CSV Path Traversal
Slug
bulk-editor
Published
2024-12-27
Title
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.8.6 - Authenticated (Editor+) Path Traversal
Slug
bulk-editor
Published
2026-03-12
Title
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.9 - Authenticated (Editor+) SQL Injection
Slug
bulk-featured-image
Published
2025-05-07
Title
Bulk Featured Image <= 1.2.4 - Missing Authorization
Slug
bulk-featured-image
Published
2025-07-04
Title
Bulk Featured Image <= 1.2.2 - Authenticated (Admin+) Arbitrary File Upload
Slug
bulk-featured-image
Published
2025-09-05
Title
Bulk Featured Image <= 1.2.2 - Authenticated (Admin+) Arbitrary File Upload
Slug
bulk-image-alt-text-with-yoast
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulk-image-alt-text-with-yoast
Published
2026-01-08
Title
BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce < 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bulk-image-resizer
Published
2024-10-17
Title
Bulk images optimizer: Resize, optimize, convert to webp, rename ... <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
Slug
bulk-image-title-attribute
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulk-image-title-attribute
Published
2025-10-04
Title
Bulk Auto Image Title Attribute <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bulk-me-now
Published
2025-01-09
Title
Bulk Me Now <= 2.0 - Reflected XSS
Slug
bulk-me-now
Published
2025-01-09
Title
Bulk Me Now <= 2.0 - Stored XSS via Shortcode
Slug
bulk-me-now
Published
2025-01-09
Title
Bulk Me Now <= 2.0 - Message Deletion via CSRF
Slug
bulk-menu-edit
Published
2025-01-29
Title
Bulk Menu Edit < 1.3.1 - Missing Authorization
Slug
bulk-noindex-nofollow-toolkit-by-mad-fish
Published
2023-10-18
Title
Bulk NoIndex & NoFollow Toolkit < 1.5 - Reflected XSS
Slug
bulk-noindex-nofollow-toolkit-by-mad-fish
Published
2023-09-04
Title
Bulk NoIndex & NoFollow Toolkit < 1.51 - Missing Authorization
Slug
bulk-noindex-nofollow-toolkit-by-mad-fish
Published
2024-03-25
Title
Bulk NoIndex & NoFollow Toolkit < 2.10 - Reflected Cross-Site Scripting via tab, order, and orderby
Slug
bulk-noindex-nofollow-toolkit-by-mad-fish
Published
2024-09-25
Title
Bulk NoIndex & NoFollow Toolkit < 2.16 - Reflected Cross-Site Scripting