Vulnerability · Published Apr 10, 2024 · Assigned by Patchstack
CVE-2024-31430Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins
Medium 4.3
In plain English
A medium-severity cross-site request forgery in BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net from realmag777. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Official description
Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional, realmag777 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net.This issue affects WOLF – WordPress Posts Bulk Editor and Manager Professional: from n/a through 1.0.8.1; BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net: from n/a through 1.1.4.1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| realmag777 | WOLF – WordPress Posts Bulk Editor and Manager Professional | n/a – through 1.0.8.1 |
| realmag777 | BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net | n/a – through 1.1.4.1 |
Weakness: CWE-352 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
References
- https://patchstack.com/database/vulnerability/bulk-editor/wordpress-wolf-wordpress-posts-bulk-editor-and-manager-professional-plugin-1-0-8-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry
- https://patchstack.com/database/vulnerability/woo-bulk-editor/wordpress-bear-bulk-editor-and-products-manager-professional-for-woocommerce-plugin-1-1-4-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry