Vulnerabilities > Pluginus > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-03-29 CVE-2024-30463 Unspecified vulnerability in Pluginus Bear - Woocommerce Bulk Editor and products Manager Professional
Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.3.
network
low complexity
pluginus
5.3
2024-03-28 CVE-2024-30200 Unspecified vulnerability in Pluginus Bear - Woocommerce Bulk Editor and products Manager Professional
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2.
network
low complexity
pluginus
6.1
2024-03-27 CVE-2024-29763 Unspecified vulnerability in Pluginus Wordpress Meta Data and Taxonomies Filter
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Reflected XSS.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.3.
network
low complexity
pluginus
6.1
2024-03-27 CVE-2024-29932 Unspecified vulnerability in Pluginus Wordpress Meta Data and Taxonomies Filter
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.2.
network
low complexity
pluginus
5.4
2024-03-27 CVE-2024-29906 Unspecified vulnerability in Pluginus Wordpress Meta Data and Taxonomies Filter
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF) allows Stored XSS.This issue affects WordPress Meta Data and Taxonomies Filter (MDTF): from n/a through 1.3.2.
network
low complexity
pluginus
5.4
2024-03-23 CVE-2024-24835 Unspecified vulnerability in Pluginus Bear - Woocommerce Bulk Editor and products Manager Professional
Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.
network
low complexity
pluginus
6.5
2024-02-10 CVE-2023-51480 Cross-site Scripting vulnerability in Pluginus Woot
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 Active Products Tables for WooCommerce.
network
low complexity
pluginus CWE-79
5.4
2024-02-08 CVE-2024-24834 Unspecified vulnerability in Pluginus Bear - Woocommerce Bulk Editor and products Manager Professional
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net allows Stored XSS.This issue affects BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net: from n/a through 1.1.4.
network
low complexity
pluginus
4.8
2024-02-05 CVE-2024-0790 Cross-Site Request Forgery (CSRF) vulnerability in Pluginus Wolf - Wordpress Posts Bulk Editor and products Manager Professional
The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8.1.
network
low complexity
pluginus CWE-352
4.3
2024-02-05 CVE-2024-0791 Missing Authorization vulnerability in Pluginus Wolf - Wordpress Posts Bulk Editor and products Manager Professional
The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to unauthorized access, modification or loss of data due to a missing capability check on the wpbe_create_new_term, wpbe_update_tax_term, and wpbe_delete_tax_term functions in all versions up to, and including, 1.0.8.1.
network
low complexity
pluginus CWE-862
4.3