CVE-2025-30946

Cross-Site Request Forgery (CSRF) vulnerability in Michael Cannon Custom Bulk/Quick Edit custom-bulkquick-edit allows Cross Site Request Forgery.This issue affects Custom Bulk/Quick Edit: from n/a through <= 1.6.10.

Score

CVSS 3.1 4.3 Medium

Status

Deferred - audit@patchstack.com

Published

2025-06-06

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Custom Bulkquick Edit (Michael Cannon)

References

• https://patchstack.com/database/Wordpress/Plugin/custom-bulkquick-edit/vulnerability/wordpress-custom-bulk-quick-edit-1…