Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-32431 EUVD-2026-11965GHSA-7q9c-72v7-cvhg

WordPress Astra Bulk Edit plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

Published Mar 13, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: Brainstorm Force Product: Astra Bulk Edit

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Astra Bulk Edit astra-bulk-edit allows DOM-Based XSS.This issue affects Astra Bulk Edit: from n/a through <= 1.2.10.

Affected products

VendorProductAffectedFixed
Brainstorm Force Astra Bulk Edit ≤ 1.2.10 —

References