CVE-2025-68550

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in VillaTheme WPBulky wpbulky-wp-bulk-edit-post-types allows Blind SQL Injection.This issue affects WPBulky: from n/a through = 1.1.13...

WordPress WPBulky plugin <= 1.1.13 - SQL Injection vulnerability

SQL Injection vulnerability discovered by benzdeus in WordPress Plugin WPBulky versions = 1.1.13...

CVE-2023-30482

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in VillaTheme WPBulky plugin = 1.0.10 versions...

CVE-2023-30482

CVE-2023-30482 is a stored cross-site scripting (XSS) vulnerability in the VillaTheme WPBulky WordPress plugin up to version 1.0.10. The description indicates exploitation requires authentication as a contributor or higher, enabling an attacker to store XSS payloads via the plugin. The connected ...