plugin

Bulk Delete Vulnerabilities

1 known security issue reported for the Bulk Delete WordPress plugin. Most recent disclosed Mar 3, 2016.

1 medium

Running Bulk Delete on your site? Check whether your installed version is affected.

Bulk Delete <= 5.5.3 - Missing Authorization

medium

The Bulk Delete plugin for WordPress is vulnerable to missing authorization due to missing capability checks on several functions in versions before 5.5.4. This makes it possible for authenticated attackers to perform restricted actions which could lead to the arbitrary deletion of site content including pages, posts a...

CVSS:: 5.4
Affected:: up to 5.5.4
Fixed in:: 5.5.4
Disclosed:: Mar 3, 2016

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database