CVE-2026-82227

Contributor SQL Injection in WPBulky = 1.2.2 versions...

EUVD-2026-67726

Contributor SQL Injection in WPBulky = 1.2.2 versions...

CVE-2026-82227

CVE-2026-82227 is a SQL Injection vulnerability in the WordPress plugin WPBulky (WP Bulk Edit Post Types), affecting versions 1.2.2 and earlier . The flaw requires Contributor-level privileges to exploit. CVSS 3.1 scores it 8.5 (HIGH) , with a changed scope, high impact on confidentiality, and lo...

CVE-2026-82227 WordPress WPBulky plugin <= 1.2.2 - SQL Injection vulnerability

Contributor SQL Injection in WPBulky = 1.2.2 versions...

WordPress WPBulky plugin <= 1.2.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by JunHee CHO in WordPress Plugin WPBulky versions = 1.2.2...

PT-2026-83157

Contributor SQL Injection in WPBulky = 1.2.2 versions...

CVE-2026-82227: Improper Neutralization of Special Elements used in an SQL Command

Contributor SQL Injection in WPBulky = 1.2.2 versions...

CVE-2025-68550

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme WPBulky wpbulky-wp-bulk-edit-post-types allows Blind SQL Injection.This issue affects WPBulky: from n/a through = 1.1.13...

EUVD-2025-204787

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme WPBulky allows Blind SQL Injection.This issue affects WPBulky: from n/a through 1.1.13...

CVE-2025-68550

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme WPBulky wpbulky-wp-bulk-edit-post-types allows Blind SQL Injection.This issue affects WPBulky: from n/a through = 1.1.13...

CVE-2025-68550

CVE-2025-68550 (WPBulky) : WordPress plugin WPBulky (WordPress Bulk Edit Post Types) is affected up to version 1.1.13. The issue is an authenticated SQL Injection vulnerability (improper neutralization of SQL elements) that can be triggered by users with Author+ privileges. The Wordfence Vulnerab...

CVE-2025-68550 WordPress WPBulky plugin <= 1.1.13 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme WPBulky allows Blind SQL Injection.This issue affects WPBulky: from n/a through 1.1.13...

WordPress WPBulky plugin <= 1.1.13 - SQL Injection vulnerability

SQL Injection vulnerability discovered by benzdeus in WordPress Plugin WPBulky versions = 1.1.13...

PT-2025-52749

Name of the Vulnerable Software and Affected Versions WPBulky versions through 1.1.13 Description An improper neutralization of special elements used in an SQL command 'SQL Injection' issue exists in VillaTheme WPBulky, allowing for Blind SQL Injection. The issue affects versions from n/a through...

CVE-2025-68550: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme WPBulky wpbulky-wp-bulk-edit-post-types allows Blind SQL Injection.This issue affects WPBulky: from n/a through = 1.1.13...

EUVD-2023-34897

Malicious code in bioql PyPI...

CVE-2023-30482

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in VillaTheme WPBulky plugin = 1.0.10 versions...

CVE-2023-30482

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in VillaTheme WPBulky plugin = 1.0.10 versions...

CVE-2023-30482

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in VillaTheme WPBulky plugin = 1.0.10 versions...

CVE-2023-30482

CVE-2023-30482 is a stored cross-site scripting (XSS) vulnerability in the VillaTheme WPBulky WordPress plugin up to version 1.0.10. The description indicates exploitation requires authentication as a contributor or higher, enabling an attacker to store XSS payloads via the plugin. The connected ...