Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:25 a.m.•18 views

CVE-2023-4942

The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobebulkoperationsvisibility function. This makes it possible for unauthenticated attackers to manipulate products via a forge...

4.3CVSS6.2AI score0.00328EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:56 a.m.•15 views

CVE-2023-4943

The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to a missing capability check on the woobebulkoperationsvisibility function. This makes it possible for authenticated attackers subscriber or higher to manipulate products...

4.3CVSS5.9AI score0.00567EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/20 7:15 a.m.•14 views

CVE-2023-4940

The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobebulkoperationsswap function. This makes it possible for unauthenticated attackers to manipulate products via a forged...

4.3CVSS7.2AI score0.00319EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/10/20 7:15 a.m.•18 views

CVE-2023-4942

The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is due to missing or incorrect nonce validation on the woobebulkoperationsvisibility function. This makes it possible for unauthenticated attackers to manipulate products via a forge...

4.3CVSS7.2AI score0.00328EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/10/20 12:00 a.m.•17 views

PT-2023-31211 · WordPress · Bear

Name of the Vulnerable Software and Affected Versions: The BEAR for WordPress versions up to, and including, 1.1.3.3 Description: The issue is due to a missing capability check on the woobe bulkoperations swap function, making it possible for authenticated attackers subscriber or higher to...

4.3CVSS5.3AI score0.00567EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/10/20 12:00 a.m.•17 views

WordPress Plugin BEAR Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS6.7AI score0.00328EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/10/20 12:00 a.m.•6 views

PT-2023-31126

Name of the Vulnerable Software and Affected Versions The BEAR for WordPress versions up to, and including, 1.1.3.3 Description The issue is due to missing capability checks on the woobe bulkoperations delete function, making it possible for authenticated attackers with subscriber access or highe...

5.4CVSS5.6AI score0.00321EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/10/20 12:00 a.m.•9 views

PT-2023-31123

Name of the Vulnerable Software and Affected Versions The BEAR for WordPress versions up to, and including, 1.1.3.3 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the woobe bulkoperations delete function. This allows unauthenticated...

5.4CVSS5.5AI score0.00328EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/10/20 12:00 a.m.•19 views

WordPress Plugin BEAR Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS6.8AI score0.00567EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/10/20 12:00 a.m.•15 views

WordPress Plugin BEAR Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS6.7AI score0.00567EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/10/19 12:00 a.m.•4 views

PT-2023-31219

Name of the Vulnerable Software and Affected Versions The BEAR for WordPress versions up to, and including, 1.1.3.3 Description The issue is related to Missing Authorization. This is due to a missing capability check on the woobe bulkoperations visibility function, making it possible for...

4.3CVSS5.7AI score0.00567EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/10/19 12:00 a.m.•19 views

PT-2023-31216 · WordPress · Bear

Name of the Vulnerable Software and Affected Versions: The BEAR for WordPress versions up to, and including, 1.1.3.3 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the woobe bulkoperations visibility function. This allows...

4.3CVSS5.2AI score0.00328EPSS
SaveExploits0References6
Fedora
Fedora
•added 2011/10/02 6:12 p.m.•49 views

[SECURITY] Fedora 16 Update: drupal6-views_bulk_operations-1.11-1.fc16

This module augments Views by allowing bulk operations to be executed on the nodes displayed by a view. It does so by showing a check box in front of each node, and adding a select box containing operations that can be applied on the selected nodes...

6.1CVSS3.3AI score0.01311EPSS
SaveExploits0
Rows per page
Query Builder