Vulnerabilities

TI-2025-22216 CVE-2025-30946 · GHSA-3pf8-v7f6-5947

WordPress Custom Bulk/Quick Edit plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Michael Cannon Custom Bulk/Quick Edit custom-bulkquick-edit allows Cross Site Request Forgery.This issue affects Custom Bulk/Quick Edit: from n/a through <= 1.6.10.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00165 Published 2025-06-06 No fix listed CWE-352

TI-2025-29199 CVE-2025-46481 · GHSA-2qjp-9769-4mq4

WordPress Flickr Shortcode Importer plugin <= 2.2.3 - PHP Object Injection Vulnerability

LOW 34

Deserialization of Untrusted Data vulnerability in Michael Cannon Flickr Shortcode Importer flickr-shortcode-importer allows Object Injection.This issue affects Flickr Shortcode Importer: from n/a through <= 2.2.3.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00582 Published 2025-04-24 No fix listed CWE-502

Vulnerabilities

Filters

WordPress Custom Bulk/Quick Edit plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability

WordPress Flickr Shortcode Importer plugin <= 2.2.3 - PHP Object Injection Vulnerability