Known Vulnerabilities for WP Bulk Delete by Xylus Themes
Listed below are 10 of the newest known vulnerabilities associated with "WP Bulk Delete" by "Xylus Themes".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57520 json | Bitwarden Server before 2026.5.0 contains a privilege escalation vulnerability that allows authenticated Custom users with Ma... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-56784 json | OpenRemote before 1.25.0 contains an insecure direct object reference (IDOR) vulnerability in the bulk alarm deletion endpoin... | Not Provided | 2026-06-23 | 2026-06-23 |
| CVE-2026-56423 json | MISP Core contained broken access-control checks in the bulk deletion flows for Event Reports and Sharing Groups. The affect... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-48777 json | FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable, 1.4.0-beta and 1.4.1-beta... | Not Provided | 2026-06-16 | 2026-06-17 |
| CVE-2026-45342 json | LinkAce is a self-hosted archive to collect website links. Prior to 2.5.6, LinkAce contains an Insecure Direct Object Referen... | Not Provided | 2026-05-28 | 2026-05-29 |
| CVE-2026-44542 json | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-stable and 1.3.9-beta, attacker-controlled... | Not Provided | 2026-05-14 | 2026-05-15 |
| CVE-2026-41084 json | A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`) e... | Not Provided | 2026-06-01 | 2026-06-02 |
| CVE-2026-8411 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delet... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-8410 json | Concrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/delet... | Not Provided | 2026-05-21 | 2026-05-22 |
| CVE-2026-6222 json | The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.51.1. This... | Not Provided | 2026-05-07 | 2026-05-07 |