Approved changes feed: RSS · Atom

cpe:2.3:a:realmag777:bear:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRealmag777 (367987aa-9884-5ea5-b6ea-639a360f4171)
ProductBear (2ab0ca40-88f4-57a6-b33d-9e29f40e612c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-45213 vulnerable 2026-06-03 15:25:03.622062 WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR woo-bulk-editor allows Blind SQL Injection.This issue affects BEAR: from n/a through <= 1.1.7.1.
Published: 2026-05-12T11:02:09.946Z
Updated: 2026-05-12T12:40:02.851Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26775 vulnerable 2026-06-03 15:00:08.441475 WordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 BEAR woo-bulk-editor allows Stored XSS.This issue affects BEAR: from n/a through <= 1.1.4.4.
Published: 2025-02-17T11:38:15.074Z
Updated: 2026-04-28T16:11:40.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30463 vulnerable 2026-06-03 14:55:38.375753 WordPress BEAR plugin <= 1.1.4.3 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.3.
Published: 2024-03-29T16:22:56.312Z
Updated: 2026-04-28T16:09:24.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30200 vulnerable 2026-06-03 14:55:37.495222 WordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2.
Published: 2024-03-28T05:09:01.595Z
Updated: 2026-04-28T16:09:22.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24835 vulnerable 2026-06-03 14:55:05.879678 WordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.
Published: 2024-03-23T14:48:54.232Z
Updated: 2026-04-28T16:09:10.554Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33314 vulnerable 2026-06-03 14:52:13.454233 WordPress BEAR Plugin <= 1.1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR plugin <= 1.1.3.1 versions.
Published: 2023-05-28T17:29:27.115Z
Updated: 2026-04-28T16:08:25.187Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.