VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) security & vulnerabilities

woo-bulk-editor— active installsLast vulnerability Oct 4, 2026

No known unpatched vulnerabilities in the latest version

All 28 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin
28Known vulnerabilities
  • Critical0
  • High1
  • Medium27
  • Low0
Vulnerabilities per year
2023: 13 vulnerabilities13232024: 5 vulnerabilities5242025: 1 vulnerability1252026: 9 vulnerabilities926

All BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) vulnerabilities

BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) vulnerabilities
SeverityVulnerabilityCVEPublished
Medium5.3Missing Authorization
≤1.2.2Update to 1.2.3
CVE-2026-95526
Medium4.3Authenticated (Custom Role+) Insecure Direct Object Reference
<1.2.2Update to 1.2.2
CVE-2026-84025
Medium4.3Cross-Site Request Forgery
<1.2.2Update to 1.2.2
CVE-2026-84024
Medium4.3Cross-Site Request Forgery
<1.2.2Update to 1.2.2
CVE-2026-84023
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.1.8Update to 1.1.9
CVE-2026-57320
Medium4.3Cross-Site Request Forgery
≤1.1.5Update to 1.1.6
CVE-2026-27415
Medium4.3Cross-Site Request Forgery to Taxonomy Term Deletion
≤1.1.5Update to 1.1.6
CVE-2026-1673
Medium6.5Cross-Site Request Forgery to Product Data Modification
≤1.1.5Update to 1.1.6
CVE-2026-1672
Medium4.9Authenticated (Shop manager+) SQL Injection
≤1.1.7.1Update to 1.1.8
CVE-2026-45213
Medium5.5Authenticated (Administrator+) Stored Cross-Site Scripting
≤1.1.4.4Update to 1.1.4.5
CVE-2025-26775
Medium5.3Cross-Site Request Forgery to Notice Dismissal
≤1.0.8.1Update to 1.0.8.2
CVE-2024-31430
Medium5.3Missing Authorization
≤1.1.4.3Update to 1.1.4.4
CVE-2024-30463
Medium6.1Reflected Cross-Site Scripting
≤1.1.4.2Update to 1.1.4.3
CVE-2024-30200
Medium5.5Authenticated (Shop manager+) Stored Cross-Site Scripting via Plugin Options
≤1.1.4Update to 1.1.4.1
CVE-2024-24834
Medium5.3Missing Authorization via Several Functions
≤1.1.4Update to 1.1.4.1
CVE-2024-24835
Medium4.3Cross-Site Request Forgery to Product Manipulation
≤1.1.3.3Update to 1.1.4
CVE-2023-4942
Medium4.3Missing Authorization to Product Manipulation
≤1.1.3.3Update to 1.1.4
CVE-2023-4938
Medium4.3Cross-Site Request Forgery to Product Manipulation
≤1.1.3.3Update to 1.1.4
CVE-2023-4940
Medium4.3Cross-Site Request Forgery to Product Manipulation
≤1.1.3.3Update to 1.1.4
CVE-2023-4937
Medium4.3Cross-Site Request Forgery to Stored Cross-Site Scripting
≤1.1.3.3Update to 1.1.4
CVE-2023-4920
Medium4.3Cross-Site Request Forgery to Profile Creation
≤1.1.3.3Update to 1.1.4
—
Medium5.4Cross-Site Request Forgery to Product Deletion
≤1.1.3.3Update to 1.1.4
CVE-2023-4923
Medium5.4Missing Authorization to Product Deletion
≤1.1.3.3Update to 1.1.4
CVE-2023-4924
Medium5.4Cross-Site Request Forgery to Product Deletion
≤1.1.3.3Update to 1.1.4
CVE-2023-4926
Medium4.3Missing Authorization to Product Manipulation
≤1.1.3.3Update to 1.1.4
CVE-2023-4941
Medium4.3Cross-Site Request Forgery to Profile Deletion
≤1.1.3.3Update to 1.1.4
CVE-2023-4935
Medium4.3Missing Authorization to Product Manipulation
≤1.1.3.3Update to 1.1.4
CVE-2023-4943
Medium6.5Cross-Site Request Forgery via Multiple Functions
≤1.1.3.1Update to 1.1.3.2
CVE-2023-33314

BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server): common questions

Does BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) have known vulnerabilities?

Yes. VulnCrest Radar lists 28 known vulnerabilities in BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server): 1 high, 27 medium. None are known to affect version null.

How do I check which version of BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) vulnerability?

CVE-2026-95526, published Oct 4, 2026: BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) <= 1.2.2 - Missing Authorization. Severity: Medium (CVSS 5.3).

Is any BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) vulnerability listed in CISA KEV?

No. None of the known BEAR – Bulk Editor for WooCommerce Professional. AI assistant on board (MCP Server) vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?