BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net

Information

Software Type Plugin
Software Slug woo-bulk-editor (view on wordpress.org)
Software Status Active
Software Author realmag777
Software Website bulk-editor.com
Software Downloads 778,217
Software Active Installs 40,000
Software Record Last Updated July 13, 2026

Showing 1-20 of 24 Vulnerabilities

Submit a Vulnerability
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-57320
Jun 29, 2026
Researcher: Bonds
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery
4.3
CVE-2026-27415
May 7, 2026
Researcher: benzdeus
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion
4.3
CVE-2026-1673
Apr 7, 2026
Researcher: Dmitrii Ignatyev
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification
6.5
CVE-2026-1672
Apr 7, 2026
Researcher: Dmitrii Ignatyev
BEAR <= 1.1.7.1 - Authenticated (Shop manager+) SQL Injection
4.9
CVE-2026-45213
Mar 30, 2026
Researcher: daroo
BEAR <= 1.1.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
5.5
CVE-2025-26775
Feb 14, 2025
Researcher: satrya wira yudha
BEAR <= 1.1.4.1 & WOLF <= 1.0.8.1 - Cross-Site Request Forgery to Notice Dismissal
5.3
CVE-2024-31430
Apr 10, 2024
Researcher: Dhabaleshwar Das
BEAR <= 1.1.4.3 - Missing Authorization
5.3
CVE-2024-30463
Mar 28, 2024
Researcher: Dhabaleshwar Das
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.4.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-30200
Mar 26, 2024
Researcher: Rafie Muhammad
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
5.5
CVE-2024-24834
Feb 2, 2024
Researcher: Kévin Mosbahi (Mika)
BEAR <= 1.1.4 - Missing Authorization via Several Functions
5.3
CVE-2024-24835
Feb 2, 2024
Researcher: Kévin Mosbahi (Mika)
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
4.3
CVE-2023-4938
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
4.3
CVE-2023-4941
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
4.3
CVE-2023-4940
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
4.3
CVE-2023-4943
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
4.3
CVE-2023-4942
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
4.3
CVE-2023-4937
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
5.4
CVE-2023-4926
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion
5.4
CVE-2023-4924
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
5.4
CVE-2023-4923
Sep 25, 2023
Researcher: Marco Wotschka
Title Status CVE ID CVSS Researchers Date
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-57320 7.2 Bonds June 29, 2026
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery Patched CVE-2026-27415 4.3 benzdeus May 7, 2026
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Taxonomy Term Deletion Patched CVE-2026-1673 4.3 Dmitrii Ignatyev April 7, 2026
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.5 - Cross-Site Request Forgery to Product Data Modification Patched CVE-2026-1672 6.5 Dmitrii Ignatyev April 7, 2026
BEAR <= 1.1.7.1 - Authenticated (Shop manager+) SQL Injection Patched CVE-2026-45213 4.9 daroo March 30, 2026
BEAR <= 1.1.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2025-26775 5.5 satrya wira yudha February 14, 2025
BEAR <= 1.1.4.1 & WOLF <= 1.0.8.1 - Cross-Site Request Forgery to Notice Dismissal Patched CVE-2024-31430 5.3 Dhabaleshwar Das April 10, 2024
BEAR <= 1.1.4.3 - Missing Authorization Patched CVE-2024-30463 5.3 Dhabaleshwar Das March 28, 2024
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.4.2 - Reflected Cross-Site Scripting Patched CVE-2024-30200 6.1 Rafie Muhammad March 26, 2024
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options Patched CVE-2024-24834 5.5 Kévin Mosbahi (Mika) February 2, 2024
BEAR <= 1.1.4 - Missing Authorization via Several Functions Patched CVE-2024-24835 5.3 Kévin Mosbahi (Mika) February 2, 2024
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation Patched CVE-2023-4938 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation Patched CVE-2023-4941 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation Patched CVE-2023-4940 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation Patched CVE-2023-4943 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation Patched CVE-2023-4942 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation Patched CVE-2023-4937 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion Patched CVE-2023-4926 5.4 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion Patched CVE-2023-4924 5.4 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion Patched CVE-2023-4923 5.4 Marco Wotschka September 25, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation