CVE-2026-84024

The BEAR – Bulk Editor and Products Manager Professional for WooCommerce WordPress plugin, in versions prior to 1.2.2 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a failure to verify a CSRF nonce before saving the plugin's meta field configuration . An attacker...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the robots field in the meta configuration. An attacker can execute arbitrary scripts in the context of the user's browser by submitting a specially crafted payload. Details Cross-site scripting or XSS is a...

CVE-2025-52277

Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...

CVE-2025-52277

Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...

CVE-2025-52277: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in YesWiki v.4.54 allows a remote attacker to execute arbitrary code via a crafted payload to the meta configuration robots field...