CVE-2024-4199

The Bulk Posts Editing For WordPress plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on the plugin's AJAX actions in all versions up to, and including, 4.2.3. This makes it possible for authenticated attackers, with subscriber access and higher, to invoke their corresponding functions. This may lead to post creation and duplication, post content retrieval, post taxonomy manipulation.

• CWE-862

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3085134%40ithemeland-bulk-posts-editing-lite%2Ftrunk&old=2946926%40ithemeland-bulk-posts-editing-lite%2Ftrunk&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/683131a0-eec3-4251-b322-5c2088855687?source=cve
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3085134%40ithemeland-bulk-posts-editing-lite%2Ftrunk&old=2946926%40ithemeland-bulk-posts-editing-lite%2Ftrunk&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/683131a0-eec3-4251-b322-5c2088855687?source=cve

Published

May 15, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41984A vulnerability has been identified in SmartClient modules O…3.5
• CVE-2024-41985A vulnerability has been identified in SmartClient modules O…7.3
• CVE-2024-41986A vulnerability has been identified in SmartClient modules O…6.8
• CVE-2024-41987The TEM Opera Plus FM Family Transmitter application interfa…8.6
• CVE-2024-41988TEM Opera Plus FM Family Transmitter allows access to an unp…9.3
• CVE-2024-41989An issue was discovered in Django 5.0 before 5.0.8 and 4.2 b…7.5
• CVE-2024-41990An issue was discovered in Django 5.0 before 5.0.8 and 4.2 b…7.5
• CVE-2024-41991An issue was discovered in Django 5.0 before 5.0.8 and 4.2 b…7.5
• CVE-2024-41992Wi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 a…8.8
• CVE-2024-41995Initialization of a resource with an insecure default vulner…7.5
• CVE-2024-41996Validating the order of the public keys in the Diffie-Hellma…7.5
• CVE-2024-41997An issue was discovered in version of Warp Terminal prior to…6.6