Medium · 4.3 CVE-2026-27415 EUVD-2026-28343GHSA-94cw-v8xh-fmpm

WordPress BEAR plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability

Published May 7, 2026 · Updated May 7, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery.

This issue affects BEAR: from n/a through 1.1.5.

Vendor	Product	Affected	Fixed
PluginUs.Net	BEAR	≤ 1.1.5	—