CVE-2026-1081

The Set Bulk Post Categories plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing nonce validation on the bulk category update functionality. This makes it possible for unauthenticated attackers to modify post categories in bulk via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

• CWE-352

• https://plugins.trac.wordpress.org/browser/set-bulk-post-categories/tags/1.1/set-bulk-categories.php#L36
• https://plugins.trac.wordpress.org/browser/set-bulk-post-categories/trunk/set-bulk-categories.php#L36
• https://www.wordfence.com/threat-intel/vulnerabilities/id/9503f908-ead2-4c34-89b9-1e2348b90f3c?source=cve

Published

Jan 24, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10804A vulnerability has been found in Streamlit up to 1.53.0. Im…4.7
• CVE-2026-10805A flaw was found in NetworkManager. This local privilege esc…6.7
• CVE-2026-10806A vulnerability was found in mjperpinosa stumasy. The affect…6.3
• CVE-2026-10807A vulnerability was determined in mjperpinosa stumasy. The i…6.3
• CVE-2026-10808A vulnerability was identified in itsourcecode Fees Manageme…6.3
• CVE-2026-10809A security flaw has been discovered in itsourcecode Fees Man…6.3
• CVE-2026-10810A weakness has been identified in itsourcecode Fees Manageme…4.3
• CVE-2026-10811A security vulnerability has been detected in itsourcecode F…6.3
• CVE-2026-10812A vulnerability was detected in zilliztech GPTCache up to 0.…3.6
• CVE-2026-10813A flaw has been found in LMCache up to 0.4.6. This affects t…3.6
• CVE-2026-10814A vulnerability has been found in milvus-io milvus up to 2.6…7
• CVE-2026-10815A vulnerability was found in LakshayD02 Hostel-Management-Sy…6.3