CVE-2023-31218

HIGH

Pluginus Wolf - Wordpress Posts Bulk Editor And Products Manager Professional < 1.0.7 - CSRF

Title source: rule

Description

Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professional plugin <= 1.0.6 versions.

References (1)

Core 1

Core References

Third Party Advisory vdb-entry

https://patchstack.com/database/vulnerability/bulk-editor/wordpress-wolf-wordpress-posts-bulk-editor-and-manager-professional-plugin-1-0-6-cross-site-scripting-xss-via-csrf-vulnerability?_s_id=cve

Scores

CVSS v3 7.1

EPSS 0.0021

EPSS Percentile 11.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Details

CWE

CWE-352 CWE-79

Status published

Products (2)

pluginus/wolf_-_wordpress_posts_bulk_editor_and_products_manager_professional < 1.0.7

realmag777/WOLF – WordPress Posts Bulk Editor and Manager Professional < 1.0.6

Published Aug 18, 2023

Tracked Since Feb 18, 2026