WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin < 1.5.13 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin versions 1.5.13. Solution Update the WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin to the latest available version at...

WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin < 1.5.13 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin versions 1.5.13. Solution Update the WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin to the latest available version at least 1.5.13...

WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin < 1.3.28 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin versions 1.3.28. Solution Update the WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin to the latest available version at least 1.3.28...

WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin < 1.7.13 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin versions 1.7.13. Solution Update the WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin to the latest available version at least 1.7.13...

WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin < 1.7.13 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin versions 1.7.13. Solution Update the WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin to the latest available version at least...

WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin < 1.0.49 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin versions 1.0.49. Solution Update the WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin to the latest available version at least 1.0.49...

WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin < 1.0.49 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin versions 1.0.49. Solution Update the WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin to the latest available version at...

WordPress Bulk Edit Posts and Products in Spreadsheet plugin < 2.24.13 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Edit Posts and Products in Spreadsheet plugin versions 2.24.13. Solution Update the WordPress Bulk Edit Posts and Products in Spreadsheet plugin to the latest available version at least 2.24.13...

WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin < 1.5.23 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin versions 1.5.23. Solution Update the WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin to the latest available...

CVE-2022-0328: Cross-Site Request Forgery (CSRF)

The Simple Membership WordPress plugin before 4.0.9 does not have CSRF check when deleting members in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack...

WordPress Bulk Attachment Download plugin < 1.3.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Attachment Download plugin versions 1.3.5. Solution Update the WordPress Bulk Attachment Download plugin to the latest available version at least 1.3.5...

WordPress Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster plugin <= 1.0.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster plugin versions = 1.0.6. Solution No patched version available...

WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin < 1.3.28 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin versions 1.3.28. Solution Update the WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin to the latest available version at least...

PT-2022-9452

Name of the Vulnerable Software and Affected Versions Orange Form WordPress plugin version 1.0 Description The issue concerns an unprepared SQL query with an unsanitized parameter $id in the process bulk action function, located in the "admin/orange-form-email.php" file. Although only admins can...

WordPress Bulk Edit Posts and Products in Spreadsheet plugin < 2.24.13 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Bulk Edit Posts and Products in Spreadsheet plugin versions 2.24.13. Solution Update the WordPress Bulk Edit Posts and Products in Spreadsheet plugin to the latest available version at least 2.24.13...

WordPress Bulk Attachment Download plugin < 1.3.5 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Bulk Attachment Download plugin versions 1.3.5. Solution Update the WordPress Bulk Attachment Download plugin to the latest available version at least 1.3.5...

WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin < 1.5.23 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin versions 1.5.23. Solution Update the WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugi...

PT-2022-13108

Name of the Vulnerable Software and Affected Versions Simple Membership WordPress plugin versions prior to 4.0.9 Description The issue concerns a lack of CSRF check when deleting members in bulk. This could allow attackers to make a logged-in admin delete members via a CSRF attack. Recommendation...

Cross-Site Request Forgery (CSRF) to User Privilege Escalation

Description Pandora FMS v7.0NG.759 allows Cross-Site Request Forgery in Bulk operation User operation resulting in elevation of privilege to Administrator group. Detail Version: Pandora FMS v7.0NG.759 - OUM 759 - MR 51 Affected components: Console Proof of Concept Affected Endpoint: POST...

The CIA Has Secretly Run a ‘Bulk Collection’ Program

Plus: Vulnerability fixes, the return of EARN IT, and more of the week’s top security news...