Approved changes feed: RSS · Atom

cpe:2.3:a:pluginus:wolf_-_wordpress_posts_bulk_editor_and_products_manager_professional:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorPluginus (b2d4bfa9-c97b-5f60-91a9-fcfd90546f78)
ProductWolf Wordpress Posts Bulk Editor And Products Manager Professional (493e3e15-2de4-5b92-8226-027895e00acc)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-24605 vulnerable 2026-06-08 07:12:49.586849 WordPress WOLF plugin <= 1.0.8.5 - Path Traversal vulnerability
HIGH (7.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This issue affects WOLF: from n/a through <= 1.0.8.5.
Published: 2025-02-03T14:22:47.343Z
Updated: 2026-04-28T16:11:29.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52396 vulnerable 2026-06-08 06:52:15.074277 WordPress WOLF plugin <= 1.0.8.3 - CSV Limited Path Traversal vulnerability
MEDIUM (4.9)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This issue affects WOLF: from n/a through <= 1.0.8.3.
Published: 2024-11-14T17:26:48.289Z
Updated: 2026-04-28T16:10:40.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34558 vulnerable 2026-06-08 06:37:33.477477 WordPress WOLF plugin <= 1.0.8.2 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF allows Stored XSS.This issue affects WOLF: from n/a through 1.0.8.2.
Published: 2024-05-08T11:13:06.360Z
Updated: 2026-04-28T16:09:49.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31430 vulnerable 2026-06-08 06:35:31.526357 Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR and WOLF WordPress plugins
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional, realmag777 BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net.This issue affects WOLF – WordPress Posts Bulk Editor and Manager Professional: from n/a through 1.0.8.1; BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net: from n/a through 1.1.4.1.
Published: 2024-04-10T19:10:01.565Z
Updated: 2026-04-28T16:09:32.274Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22159 vulnerable 2026-06-08 06:29:33.966231 WordPress WOLF Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional allows Reflected XSS.This issue affects WOLF – WordPress Posts Bulk Editor and Manager Professional: from n/a through 1.0.8.
Published: 2024-01-31T18:12:04.015Z
Updated: 2026-04-28T16:09:09.023Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0791 vulnerable 2026-06-08 06:22:02.683848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0790 vulnerable 2026-06-08 06:22:02.683194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46152 vulnerable 2026-06-08 06:12:44.051351 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44990 vulnerable 2026-06-08 06:12:41.584083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31218 vulnerable 2026-06-08 06:04:42.366790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.