Skip to content
OpenAdvisories

Product · ithemelandco

WPBULKiT – Bulk Edit WordPress Posts & Pages

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.3

    Bulk Posts Editing For WordPress <= 4.2.3 - Cross-Site Request Forgery

    The Bulk Posts Editing For WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.3. This is due to missing or incorrect nonce validation on the plugin's AJAX actions.. This makes it possible for u…

  • Medium 4.3

    Bulk Posts Editing For WordPress <= 4.2.3 - Authenticated (Subscriber+) Missing Authorization

    The Bulk Posts Editing For WordPress plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on the plugin's AJAX actions in all versions up to, and including, 4.2.3. This makes it possible for authenticate…