WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net

BEAR - WooCommerce Bulk Editor Professional (former WOOBE) is plugin for bulk edit/manage woocommerce products their data in the flexible way

22Reported vulnerabilities
8.8Highest CVSS score
1.2.1Latest version
40,000+Active installs

What to do now

Update BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net to 1.1.9 or later. 22 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 5, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-4920 High 8.8 0.3% 1.1.3.3 and earlier 1.1.4 October 20, 2023
CVE-2026-57320 High 7.2 0.3% 1.1.8 and earlier 1.1.9 June 29, 2026
CVE-2026-1672 Medium 6.5 0.2% 0 to 1.1.5 (inclusive) 1.1.6 April 8, 2026
CVE-2023-33314 Medium 6.5 0.3% 1.1.3.1 and earlier 1.1.3.2 May 22, 2023
CVE-2024-30200 Medium 6.1 0.4% 1.1.4.2 and earlier 1.1.4.3 March 26, 2024
CVE-2025-26775 Medium 5.5 0.2% 1.1.4.4 and earlier 1.1.4.5 February 14, 2025
CVE-2024-24834 Medium 5.5 0.3% 1.1.4 and earlier 1.1.4.1 February 2, 2024
CVE-2024-30463 Medium 5.3 0.4% 1.1.4.3 and earlier 1.1.4.4 March 28, 2024
CVE-2024-24835 Medium 5.3 0.4% 1.1.4 and earlier 1.1.4.1 February 2, 2024
CVE-2026-45213 Medium 4.9 0.2% 1.1.7.1 and earlier 1.1.8 March 30, 2026
CVE-2026-27415 Medium 4.3 0.1% 1.1.5 and earlier 1.1.6 May 7, 2026
CVE-2026-1673 Medium 4.3 0.2% 0 to 1.1.5 (inclusive) 1.1.6 April 8, 2026
CVE-2023-4941 Medium 4.3 0.5% 1.1.3.3 and earlier 1.1.4 October 20, 2023
CVE-2023-4926 Medium 4.3 0.3% 1.1.3.3 and earlier 1.1.4 October 20, 2023
CVE-2023-4924 Medium 4.3 0.3% 1.1.3.3 and earlier 1.1.4 October 20, 2023
CVE-2023-4923 Medium 4.3 0.3% 1.1.3.3 and earlier 1.1.4 October 20, 2023
CVE-2023-4943 Medium 4.3 0.5% 1.1.3.3 and earlier 1.1.4 October 20, 2023
CVE-2023-4942 Medium 4.3 0.3% 1.1.3.3 and earlier 1.1.4 October 20, 2023
CVE-2023-4940 Medium 4.3 0.3% 1.1.3.3 and earlier 1.1.4 October 20, 2023
CVE-2023-4937 Medium 4.3 0.3% 1.1.3.3 and earlier 1.1.4 October 20, 2023
CVE-2023-4935 Medium 4.3 0.3% 1.1.3.3 and earlier 1.1.4 October 20, 2023
CVE-2023-4938 Medium 4.3 0.4% 1.1.3.3 and earlier 1.1.4 October 18, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.