Every CVE whose affected-product data names Ombu Bulk Me Now!, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2024-12638 — CVSS 7.1 (high): The Bulk Me Now! WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a…
CVE-2024-12708 — CVSS 7.1 (high): The Bulk Me Now! WordPress plugin through 2.0 does not validate and escape some of its shortcode attributes before outputting them back in…
CVE-2024-12709 — CVSS 4.3 (medium): The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users…