Realmag777 BEAR vulnerabilities

8 vulnerabilities

Known vulnerabilities in Realmag777 BEAR, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.9CVE-2025-26775pluginusbear_-_woocommerce_bulk_editor_and_products_manager_professional+2
EPSS score
0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 BEAR woo-bulk-editor allows Stored XSS.This issue affects BEAR: from n/a through <= 1.1.4.4.6.5CVE-2024-24835pluginusbear_-_woocommerce_bulk_editor_and_products_manager_professional+2
EPSS score
0.38%
Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.7.1CVE-2024-30200pluginusbear_-_woocommerce_bulk_editor_and_products_manager_professional+2
EPSS score
0.37%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 BEAR allows Reflected XSS.This issue affects BEAR: from n/a through 1.1.4.2.5.3CVE-2024-30463pluginusbear_-_woocommerce_bulk_editor_and_products_manager_professional+2
EPSS score
0.36%
Missing Authorization vulnerability in realmag777 BEAR.This issue affects BEAR: from n/a through 1.1.4.3.7.2CVE-2026-57320realmag777bear+1
EPSS score
0.25%
Unauthenticated Cross Site Scripting (XSS) in BEAR <= 1.1.8 versions.7.6CVE-2026-45213realmag777bear+1
EPSS score
0.38%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 BEAR woo-bulk-editor allows Blind SQL Injection.This issue affects BEAR: from n/a through <= 1.1.7.1.7.3CVE-2026-95526realmag777bear+1
EPSS score
0.23%
Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions.8.8CVE-2023-33314pluginusbear_-_woocommerce_bulk_editor_and_products_manager_professional+2
EPSS score
0.30%
Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR plugin <= 1.1.3.1 versions.