WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bulk-delete-users-by-email
Published
2022-12-02
Title
Bulk Delete Users by Email < 2.0.0 - Reflected Cross-Site Scripting
Slug
bulk-edit-categories-tags
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulk-edit-categories-tags
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bulk-edit-events
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulk-edit-events
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bulk-edit-post-titles
Published
2023-12-04
Title
Bulk Edit Post Titles <= 5.0.0 - Missing Authorization
Slug
bulk-edit-post-titles
Published
2024-02-26
Title
Bulk Edit Post Titles <= 5.0.0 - Missing Authorization via bulkUpdatePostTitles
Slug
bulk-edit-posts-on-frontend
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulk-edit-posts-on-frontend
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bulk-edit-user-profiles-in-spreadsheet
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulk-edit-user-profiles-in-spreadsheet
Published
2022-04-19
Title
Bulk Edit and Create User Profiles < 1.5.14 - Admin+ Stored Cross-Site Scripting
Slug
bulk-edit-user-profiles-in-spreadsheet
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bulk-editor
Published
2023-05-29
Title
WOLF < 1.0.7.1 - Profile Creation via CSRF
Slug
bulk-editor
Published
2023-05-03
Title
WOLF < 1.0.7 - Subscriber+ Stored XSS
Slug
bulk-editor
Published
2023-05-29
Title
WOLF < 1.0.7.1 - Profile Creation via CSRF
Slug
bulk-editor
Published
2023-10-17
Title
WOLF < 1.0.7.2 - Admin+ Stored XSS
Slug
bulk-editor
Published
2023-10-17
Title
WOLF < 1.0.7.2 - Cross-Site Request Forgery (CSRF)
Slug
bulk-editor
Published
2024-01-16
Title
WOLF < 1.0.8.1 - Unauthenticated Stored Cross-Site Scripting via profile_title
Slug
bulk-editor
Published
2024-01-30
Title
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.8.2 - Missing Authorization
Slug
bulk-editor
Published
2024-01-30
Title
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.8.2 - Cross-Site Request Forgery
Slug
bulk-editor
Published
2024-04-10
Title
BEAR <= 1.1.4.1 & WOLF <= 1.0.8.1 - Cross-Site Request Forgery to Notice Dismissal
Slug
bulk-editor
Published
2024-05-07
Title
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.8.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
bulk-editor
Published
2024-11-11
Title
WOLF < 1.0.8.4 - Authenticated (Editor+) CSV Path Traversal
Slug
bulk-editor
Published
2024-12-27
Title
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.8.6 - Authenticated (Editor+) Path Traversal
Slug
bulk-editor
Published
2026-03-12
Title
WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.9 - Authenticated (Editor+) SQL Injection