Approved changes feed: RSS · Atom

cpe:2.3:a:realmag777:bear:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRealmag777 (367987aa-9884-5ea5-b6ea-639a360f4171)
ProductBear (2ab0ca40-88f4-57a6-b33d-9e29f40e612c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57320 vulnerable 2026-07-29 01:00:29.597962 WordPress BEAR plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions.
Published: 2026-06-29T13:36:31.832Z
Updated: 2026-06-29T15:19:43.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-45213 vulnerable 2026-06-08 08:05:11.513412 WordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR woo-bulk-editor allows Blind SQL Injection.This issue affects BEAR: from n/a through <= 1.1.7.1.
Published: 2026-05-12T11:02:09.946Z
Updated: 2026-05-12T12:40:02.851Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26775 vulnerable 2026-06-08 07:14:50.428623 WordPress BEAR Plugin <= 1.1.4.4 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 BEAR woo-bulk-editor allows Stored XSS.This issue affects BEAR: from n/a through <= 1.1.4.4.
Published: 2025-02-17T11:38:15.074Z
Updated: 2026-04-28T16:11:40.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30463 vulnerable 2026-06-08 06:35:30.389290 WordPress BEAR plugin <= 1.1.4.3 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.3.
Published: 2024-03-29T16:22:56.312Z
Updated: 2026-04-28T16:09:24.415Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30200 vulnerable 2026-06-08 06:35:29.235794 WordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2.
Published: 2024-03-28T05:09:01.595Z
Updated: 2026-04-28T16:09:22.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24835 vulnerable 2026-06-08 06:29:41.869893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-33314 vulnerable 2026-06-08 06:06:22.302561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.