CVE-2026-14234
WOLF - WordPress Posts Bulk Editor and Manager < 1.1.0 - Stored XSS via CSRF
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WOLF WordPress plugin before 1.1.0 does not perform a nonce or capability check on one of its AJAX actions, allowing an unauthenticated attacker to trick a logged-in administrator into writing arbitrary content, including a malicious script, into a post via a cross-site request, resulting in stored Cross-Site Scripting.
| Vendor | unknown |
| Product | wolf |
| Published | Jul 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wolf
Be the first to know when new unknown vulnerabilities affecting unknown wolf are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WOLF
0 < 1.1.0
References
Credits
she11f WPScan