Bulk Me Now (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-01-30. Vendor: Unknown.

CVEs of Bulk Me Now

• CVE-2024-12709 - CVSS 4.3 (medium), 2025-01-30: The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted…
• CVE-2024-12708 - CVSS 7.1 (high), 2025-01-30: The Bulk Me Now! WordPress plugin through 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where…
• CVE-2024-12638 - CVSS 7.1 (high), 2025-01-30: The Bulk Me Now! WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…