Lucene search
+L

97 matches found

Vulnrichment
Vulnrichment
added 2026/03/13 11:42 a.m.2 views

CVE-2026-32431 WordPress Astra Bulk Edit plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Bulk Edit astra-bulk-edit allows DOM-Based XSS.This issue affects Astra Bulk Edit: from n/a through = 1.2.10...

6.5CVSS5.8AI score0.00161EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.10 views

WordPress plugin Astra Bulk Edit 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin Astra Bulk Edit, which stem...

6.5CVSS5.5AI score0.00161EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.12 views

PT-2026-25277

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brainstorm Force Astra Bulk Edit astra-bulk-edit allows DOM-Based XSS.This issue affects Astra Bulk Edit: from n/a through = 1.2.10...

6.5CVSS5.8AI score0.00161EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/03/01 4:5 p.m.5 views

WordPress Astra Bulk Edit plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin Astra Bulk Edit versions = 1.2.10...

6.5CVSS5.8AI score0.00161EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/02/03 3:8 p.m.10 views

WordPress Bulk Edit Post Titles plugin <= 5.0.0 - Missing Authorization via bulkUpdatePostTitles vulnerability

Missing Authorization via bulkUpdatePostTitles vulnerability discovered by Francesco Carlucci in WordPress Plugin Bulk Edit Post Titles versions = 5.0.0...

4.3CVSS5.3AI score0.00428EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:28 a.m.8 views

CVE-2023-49754

Missing Authorization vulnerability in Yogesh Pawar Bulk Edit Post Titles bulk-edit-post-titles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Edit Post Titles: from n/a through = 5.0.0...

4.3CVSS7.3AI score0.00396EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.11 views

WordPress ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes plugin <= 1.4.9 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes versions = 1.4.9...

6.5CVSS5.9AI score0.00337EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-17214

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.0014EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-13844

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.00136EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-53677

Malicious code in bioql PyPI...

4.3CVSS9AI score0.00396EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-48507

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00387EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2025-2751

Malicious code in bioql PyPI...

7.6CVSS8.6AI score0.00718EPSS
Exploits1References1
CNVD
CNVD
added 2025/07/23 12:0 a.m.4 views

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes SQL Injection Vulnerability

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes is a plugin for bulk editing of WooCommerce product information, prices and attributes with support for Simple, Variant, External and Bundled products. WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes...

8.5CVSS8.1AI score0.00322EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/07/18 11:54 a.m.13 views

CVE-2025-47645

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attributes-for-woocommerce-basic allows SQL Injection.This issue affects ELEX WooCommer...

8.5CVSS5.9AI score0.00322EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/16 12:0 a.m.6 views

WordPress plugin ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes SQL注入漏洞

WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes is a plugin for bulk editing of WooCommerce product information, prices and attributes with support for Simple, Variant, External and Bundled products. WordPress ELEX WooCommerce Advanced Bulk Edit Products,Prices&Attributes...

8.5CVSS8AI score0.00322EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/08 1:19 p.m.16 views

CVE-2025-30946

Cross-Site Request Forgery CSRF vulnerability in Michael Cannon Custom Bulk/Quick Edit custom-bulkquick-edit allows Cross Site Request Forgery.This issue affects Custom Bulk/Quick Edit: from n/a through = 1.6.10...

4.3CVSS5.9AI score0.0014EPSS
Exploits0References1
NVD
NVD
added 2025/06/06 1:15 p.m.6 views

CVE-2025-30946

Cross-Site Request Forgery CSRF vulnerability in Michael Cannon Custom Bulk/Quick Edit custom-bulkquick-edit allows Cross Site Request Forgery.This issue affects Custom Bulk/Quick Edit: from n/a through = 1.6.10...

4.3CVSS0.0014EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 12:54 p.m.5 views

CVE-2025-30946 WordPress Custom Bulk/Quick Edit plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Michael Cannon Custom Bulk/Quick Edit custom-bulkquick-edit allows Cross Site Request Forgery.This issue affects Custom Bulk/Quick Edit: from n/a through = 1.6.10...

4.3CVSS5.7AI score0.0014EPSS
Exploits0References1
CVE
CVE
added 2025/06/06 12:54 p.m.43 views

CVE-2025-30946

CVE-2025-30946 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Custom Bulk/Quick Edit (custom-bulkquick-edit). The issue affects Custom Bulk/Quick Edit versions from n/a through 1.6.10. Public data includes CVSSv3.1 metrics with base score 4.3 (Medium), and the...

4.3CVSS5.9AI score0.0014EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:25 a.m.11 views

CVE-2024-0369

The Bulk Edit Post Titles plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the bulkUpdatePostTitles function in all versions up to, and including, 5.0.0. This makes it possible for authenticated attackers, with subscriber access and abov...

4.3CVSS6.5AI score0.00428EPSS
Exploits0References1
Rows per page
Query Builder