plugin

Set Bulk Post Categories Vulnerabilities

1 known security issue reported for the Set Bulk Post Categories WordPress plugin. Most recent disclosed Jan 23, 2026.

1 medium

Running Set Bulk Post Categories on your site? Check whether your installed version is affected.

Scan your site free

Set Bulk Post Categories <= 1.1 - Cross-Site Request Forgery to Bulk Post Category Update

medium

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categories in bulk via a forged...

CVSS:
4.3
Affected:
up to 1.1
Fix:
No patched version reported
Disclosed:
Jan 23, 2026

CVE-2026-1081 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database