Wolf - Wordpress Posts Bulk Editor And Products Manager Professional vulnerabilities

Product

Wolf - Wordpress Posts Bulk Editor And Products Manager Professional

by Pluginus · last CVE Feb 3, 2025

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 4Medium 6Low 0

Severity

All severities10 Critical0 High4 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Wolf - Wordpress Posts Bulk Editor And Products Manager Professional to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-52396	8.8	1%	Nov 14	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This issue affects WOLF: from n/a… Affected: before 1.0.8.4
CVE-2024-31430	8.8	0%	Apr 10	Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional, realmag777 BEAR – Bulk Editor and Products Manager… Affected: before 1.0.8.2
CVE-2023-46152	8.8	0%	Oct 25	Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.7.1 versions Affected: before 1.0.7.2
CVE-2025-24605	7.2	1%	Feb 3	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.This issue affects WOLF: from n/a… Affected: before 1.0.8.6
CVE-2024-22159	6.1	0%	Jan 31	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional allows… Affected: through 1.0.8
CVE-2023-31218	6.1	0%	Aug 18	Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin… Affected: before 1.0.7
CVE-2024-34558	4.8	0%	May 8	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF allows Stored XSS.This issue affects WOLF: from n/a through… Affected: before 1.0.8.3
CVE-2023-44990	4.8	0%	Oct 17	Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.7.1 versions Affected: before 1.0.7.2
CVE-2024-0791	4.3	1%	Feb 5	The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to unauthorized access, modification or loss of data due to a missing capability… Affected: through 1.0.8.1
CVE-2024-0790	4.3	0%	Feb 5	The WOLF – WordPress Posts Bulk Editor and Manager Professional plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8.1 Affected: through 1.0.8.1