Skip to content
OpenAdvisories

Vendor

ithemelandco

5 known vulnerabilities.

Products

WPBULKiT – Bulk Edit WordPress Posts & Pages 2 WooCommerce Report 1 GIFTiT – Free Gifts for WooCommerce 1 REPORTiT – Advanced Reporting for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-52710

    WordPress GIFTiT &#8211; Free Gifts for WooCommerce plugin <= 4.5 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT &#8211; Free Gifts for WooCommerce ithemeland-free-gifts-for-woo allows Code Injection.This issue affects GIFTiT &#8211; Free Gifts for WooComme…

    ithemelandco GIFTiT &#8211; Free Gifts for WooCommerce Web / CMS
  • Medium 4.3
    CVE-2024-4204

    Bulk Posts Editing For WordPress <= 4.2.3 - Cross-Site Request Forgery

    The Bulk Posts Editing For WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.3. This is due to missing or incorrect nonce validation on the plugin's AJAX actions.. This makes it possible for u…

    ithemelandco WPBULKiT – Bulk Edit WordPress Posts & Pages Web / CMS
  • Medium 4.3
    CVE-2024-4199

    Bulk Posts Editing For WordPress <= 4.2.3 - Authenticated (Subscriber+) Missing Authorization

    The Bulk Posts Editing For WordPress plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on the plugin's AJAX actions in all versions up to, and including, 4.2.3. This makes it possible for authenticate…

    ithemelandco WPBULKiT – Bulk Edit WordPress Posts & Pages Web / CMS