BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net

Information

Software Type Plugin
Software Slug woo-bulk-editor (view on wordpress.org)
Software Status Active
Software Author realmag777
Software Website bulk-editor.com
Software Downloads 583,063
Software Active Installs 30,000
Software Record Last Updated May 19, 2024

18 Vulnerabilities

BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile Creation
4.3
CVE-2023-4935
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
4.3
CVE-2023-4938
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
4.3
CVE-2023-4941
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
4.3
CVE-2023-4940
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
4.3
CVE-2023-4943
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
4.3
CVE-2023-4942
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
4.3
CVE-2023-4937
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
4.3
CVE-2023-4920
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile Deletion
4.3
CVE-2023-4935
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.4.1 & WOLF <= 1.0.8.1 - Cross-Site Request Forgery to Notice Dismissal
5.3
CVE-2024-31430
Apr 10, 2024
Researcher: Dhabaleshwar Das
BEAR <= 1.1.4.3 - Missing Authorization
5.3
CVE-2024-30463
Mar 28, 2024
Researcher: Dhabaleshwar Das
BEAR <= 1.1.4 - Missing Authorization via Several Functions
5.3
CVE-2024-24835
Feb 2, 2024
Researcher: Mika
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
5.4
CVE-2023-4926
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion
5.4
CVE-2023-4924
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
5.4
CVE-2023-4923
Sep 25, 2023
Researcher: Marco Wotschka
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
5.5
CVE-2024-24834
Feb 2, 2024
Researcher: Mika
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.4.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-30200
Mar 26, 2024
Researcher: Rafie Muhammad
BEAR <= 1.1.3.1 - Cross-Site Request Forgery via Multiple Functions
6.5
CVE-2023-33314
May 22, 2023
Researcher: Nguyen Xuan Chien
Title Status CVE ID CVSS Researchers Date
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile Creation Patched CVE-2023-4935 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation Patched CVE-2023-4938 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation Patched CVE-2023-4941 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation Patched CVE-2023-4940 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation Patched CVE-2023-4943 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation Patched CVE-2023-4942 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation Patched CVE-2023-4937 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting Patched CVE-2023-4920 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile Deletion Patched CVE-2023-4935 4.3 Marco Wotschka September 25, 2023
BEAR <= 1.1.4.1 & WOLF <= 1.0.8.1 - Cross-Site Request Forgery to Notice Dismissal Patched CVE-2024-31430 5.3 Dhabaleshwar Das April 10, 2024
BEAR <= 1.1.4.3 - Missing Authorization Patched CVE-2024-30463 5.3 Dhabaleshwar Das March 28, 2024
BEAR <= 1.1.4 - Missing Authorization via Several Functions Patched CVE-2024-24835 5.3 Mika February 2, 2024
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion Patched CVE-2023-4926 5.4 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion Patched CVE-2023-4924 5.4 Marco Wotschka September 25, 2023
BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion Patched CVE-2023-4923 5.4 Marco Wotschka September 25, 2023
BEAR <= 1.1.4 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options Patched CVE-2024-24834 5.5 Mika February 2, 2024
BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net <= 1.1.4.2 - Reflected Cross-Site Scripting Patched CVE-2024-30200 6.1 Rafie Muhammad March 26, 2024
BEAR <= 1.1.3.1 - Cross-Site Request Forgery via Multiple Functions Patched CVE-2023-33314 6.5 Nguyen Xuan Chien May 22, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation