| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-28951 | WordPress Bulk Featured Image plugin <= 1.2.4 - Arbitrary File Upload vulnerability | CreedAlly | Bulk Featured Image | Critical | 9.1 | 2025-07-04 08:42:11 | Deep Dive |
| CVE-2025-49423 | WordPress Bulk YouTube Post Creator plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability | Syed Tahir Ali Jan | Bulk YouTube Post Creator | High | 7.1 | 2025-06-27 11:52:09 | Deep Dive |
| CVE-2025-30946 | WordPress Custom Bulk/Quick Edit plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability | Michael Cannon | Custom Bulk/Quick Edit | Medium | 4.3 | 2025-06-06 12:54:13 | Deep Dive |
| CVE-2025-4431 | Featured Image Plus <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Featured Image Update | krasenslavov | Featured Image Plus – Bulk Edit Featured Images, Unsplash & Alt Text Manager | Medium | 4.3 | 2025-05-30 07:23:41 | Deep Dive |
| CVE-2025-26867 | WordPress Bulk theme <= 1.0.11 - Broken Access Control vulnerability | Themes4WP | Bulk | Medium | 5.3 | 2025-05-19 16:48:57 | Deep Dive |
| CVE-2025-47591 | WordPress Bulk Featured Image plugin <= 1.2.4 - Broken Access Control vulnerability | CreedAlly | Bulk Featured Image | Medium | 4.3 | 2025-05-07 14:20:23 | Deep Dive |
| CVE-2025-47473 | WordPress PW WooCommerce Bulk Edit plugin <= 2.134 - Cross Site Request Forgery (CSRF) Vulnerability | pimwick | PW WooCommerce Bulk Edit | Medium | 5.4 | 2025-05-07 14:19:45 | Deep Dive |
| CVE-2025-46489 | WordPress Bulk Assign Linked Products For WooCommerce plugin <= 2.1 - Broken Access Control Vulnerability | vinodvaswani9 | Bulk Assign Linked Products For WooCommerce | Medium | 5.3 | 2025-04-24 16:09:22 | Deep Dive |
| CVE-2025-3280 | ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.4.9 - Authenticated (Subscriber+) SQL Injection | elextensions | ELEX WooCommerce Bulk Edit Products, Prices & Attributes (Basic) | Medium | 6.5 | 2025-04-24 08:23:52 | Deep Dive |
| CVE-2025-32674 | WordPress Product Excel Import Export & Bulk Edit for WooCommerce plugin <= 4.7 - Cross Site Scripting (XSS) Vulnerability | WPFactory | Product Excel Import Export & Bulk Edit for WooCommerce | High | 7.1 | 2025-04-17 15:46:59 | Deep Dive |
| CVE-2025-39519 | WordPress Bulk Page Stub Creator plugin <= 1.1 - Reflected Cross Site Scripting (XSS) vulnerability | runthings.dev | Bulk Page Stub Creator | High | 7.1 | 2025-04-17 15:46:57 | Deep Dive |
| CVE-2025-39512 | WordPress Bulk Term Editor plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) Vulnerability | Yuya Hoshino | Bulk Term Editor | Medium | 4.3 | 2025-04-16 12:45:54 | Deep Dive |
| CVE-2025-31599 | WordPress Bulk Product Sync plugin <= 8.6 - SQL Injection vulnerability | N-Media | Bulk Product Sync | Critical | 9.3 | 2025-04-11 08:42:51 | Deep Dive |
| CVE-2025-31537 | WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 2.16 - Reflected Cross Site Scripting (XSS) vulnerability | madfishdigital | Bulk NoIndex & NoFollow Toolkit | High | 7.1 | 2025-04-01 20:58:12 | Deep Dive |
| CVE-2025-31852 | WordPress Bulk Product Sync plugin <= 8.6 - Cross Site Request Forgery (CSRF) vulnerability | N-Media | Bulk Product Sync | Medium | 4.3 | 2025-04-01 14:52:01 | Deep Dive |
| CVE-2025-31752 | WordPress Bulk Fields Editor plugin <= 1.8.0 - Broken Access Control vulnerability | termel | Bulk Fields Editor | Medium | 4.3 | 2025-04-01 14:51:12 | Deep Dive |
| CVE-2025-31598 | WordPress Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin <= 4.0.3 - Stored Cross Site Scripting (XSS) vulnerability | WPFactory | Quantity Dynamic Pricing & Bulk Discounts for WooCommerce | Medium | 6.5 | 2025-03-31 12:55:33 | Deep Dive |
| CVE-2025-28884 | WordPress WP Bulk Post Duplicator plugin <= 1.2 - Cross Site Request Forgery (CSRF) vulnerability | Rajesh Kumar | WP Bulk Post Duplicator | Medium | 4.3 | 2025-03-11 21:00:45 | Deep Dive |
| CVE-2025-27311 | WordPress Bulk Content Creator Plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability | luk3thomas | Bulk Content Creator | Medium | 4.3 | 2025-02-24 14:48:58 | Deep Dive |
| CVE-2025-24692 | WordPress Bulk Menu Edit plugin <= 1.3 - Broken Access Control vulnerability | M.Code | Bulk Menu Edit | High | 7.1 | 2025-02-14 12:44:36 | Deep Dive |