Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

BEAR — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in BEAR, with AI-generated Chinese analysis, references, and POCs.

Vendor: realmag777

CVE ID Title CVSS Severity Published
CVE-2026-95526 WordPress BEAR plugin <= 1.2.2 - Broken Access Control vulnerability CWE-862 7.3 High 2026-10-06
CVE-2026-84025 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Authenticated Product Download URL and Meta Disclosure via IDOR - - 2026-09-12
CVE-2026-84024 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Meta Field Configuration Update via CSRF - - 2026-09-12
CVE-2026-84023 BEAR - Bulk Editor and Products Manager Professional for WooCommerce < 1.2.2 - Taxonomy Term Modification via CSRF - - 2026-09-12
CVE-2026-57320 WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-06-29
CVE-2026-45213 WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability CWE-89 7.6 High 2026-05-12
CVE-2026-27415 WordPress BEAR plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium 2026-05-07
CVE-2025-26775 WordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium 2025-02-17
CVE-2024-30463 WordPress BEAR plugin <= 1.1.4.3 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-03-29
CVE-2024-30200 WordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-03-28
CVE-2024-24835 WordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-03-23
CVE-2023-33314 WordPress BEAR Plugin <= 1.1.3.1 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 5.4 Medium 2023-05-28

All 12 known CVE vulnerabilities affecting BEAR with full Chinese analysis, references, and POCs where available.