Approved changes feed: RSS · Atom

cpe:2.3:a:n-media:bulk_product_sync:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN Media (46d10340-ddef-5eb8-b937-dafe41a6924d)
ProductBulk Product Sync (87679465-7b20-57f4-b6dc-a4a3f9efc32e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-31852 vulnerable 2026-06-08 07:18:58.673001 WordPress Bulk Product Sync plugin <= 8.6 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in N-Media Bulk Product Sync sync-wc-google allows Cross Site Request Forgery.This issue affects Bulk Product Sync: from n/a through <= 8.6.
Published: 2025-04-01T14:52:01.160Z
Updated: 2026-05-11T23:59:30.014Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31599 vulnerable 2026-06-08 07:18:58.209839 WordPress Bulk Product Sync plugin <= 8.6 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N-Media Bulk Product Sync sync-wc-google allows SQL Injection.This issue affects Bulk Product Sync: from n/a through <= 8.6.
Published: 2025-04-11T08:42:51.037Z
Updated: 2026-04-28T16:12:10.045Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.