BEAR Vulnerability – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net – Cross-Site Request Forgery to Notice Dismissal – CVE-2024-31430 | WordPress Plugin Vulnerability Report

Plugin Name: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net

Key Information:

  • Software Type: Plugin
  • Software Slug: woo-bulk-editor
  • Software Status: Active
  • Software Author: realmag777
  • Software Downloads: 580,051
  • Active Installs: 30,000
  • Last Updated: April 25, 2024
  • Patched Versions:
  • Affected Versions: <=

Vulnerability Details:

  • Name: BEAR <=
  • Title: Cross-Site Request Forgery to Notice Dismissal
  • Type: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
  • CVE: CVE-2024-31430
  • CVSS Score: 5.3
  • Publicly Published: April 10, 2024
  • Researcher: Dhabaleshwar Das
  • Description: Multiple plugins and/or themes for WordPress are vulnerable to Cross-Site Request Forgery in various versions. This is due to missing or incorrect nonce validation on the admin_init() hook. This makes it possible for unauthenticated attackers to dismiss notices via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.


The BEAR plugin for WordPress has a vulnerability in versions up to and including that exposes sites to Cross-Site Request Forgery attacks due to nonce validation issues on the admin_init() hook. This vulnerability has been patched in version

Detailed Overview:

The vulnerability, identified by researcher Dhabaleshwar Das, occurs in the admin_init() hook where nonce validation fails to correctly authenticate requests. This flaw allows unauthenticated users to perform actions as administrators if they can deceive an administrator into clicking a malicious link. The primary risk of this vulnerability is the potential for unauthorised actions to be taken on the site, such as dismissing administrative notices, which could obscure important security warnings or updates. The remediation was swiftly handled by the release of version, which addresses the nonce validation issue.

Advice for Users:

  • Immediate Action: Update to the patched version immediately.
  • Check for Signs of Vulnerability: Review your site's admin action logs for any unusual dismissals or changes not recognized by your site administrators.
  • Alternate Plugins: While a patch is available, users might still consider plugins that offer similar functionality as a precaution.
  • Stay Updated: Always ensure that your plugins are updated to the latest versions to avoid vulnerabilities.


The prompt response from the plugin developers to patch this vulnerability underscores the importance of timely updates. Users are advised to ensure that they are running version or later to secure their WordPress installations.


Detailed Report: 

In today’s digital age, keeping your website updated isn’t just a best practice; it’s a necessity. The recent discovery of a security vulnerability in the popular WordPress plugin, BEAR – Bulk Editor and Products Manager Professional for WooCommerce, underscores the risks of neglecting this crucial aspect of website management. Designed by Pluginus.Net, this widely-used plugin, with over 30,000 active installs and more than half a million downloads, has been a significant aid for e-commerce sites. Yet, it has also highlighted a critical oversight in security that could compromise much more than just user data.

Vulnerability Details:

The vulnerability in question, catalogued as CVE-2024-31430, involves Cross-Site Request Forgery (CSRF) to notice dismissal and was publicly disclosed on April 10, 2024. This security flaw occurs because of missing or incorrect nonce validation on the admin_init() hook, which means unauthenticated attackers can manipulate website notices by deceiving an administrator into clicking a malicious link. Identified by researcher Dhabaleshwar Das, the issue has a moderate severity rating with a CVSS score of 5.3, indicating a significant potential for harm.

Potential Risks:

The exploitation of this vulnerability primarily allows unauthorized dismissal of critical admin notices, potentially hiding alerts about other security issues or updates that require immediate attention. For a small business, this could mean unnoticed security breaches, data leaks, or worse, direct financial losses or harm to your business's reputation.

Remediation Steps:

  • Immediately update to the patched version to close off this vulnerability.
  • Review your admin action logs for any signs of unusual activity, which might indicate that your site was compromised before the update.
  • Regularly check for updates on all your installed plugins and themes to prevent similar vulnerabilities.

Historical Context:

This isn’t the first time the BEAR plugin has faced security issues. Since May 2022, it has encountered 16 different vulnerabilities, highlighting a recurring challenge in its development. Each of these instances has been a learning opportunity for users and developers alike, emphasizing the importance of proactive security practices.


For small business owners, the reality of managing a website can be daunting, especially with the constant threat of cyber attacks. However, the regular maintenance of your site’s security measures, such as timely updates and vigilant monitoring of security logs, is essential. Ignoring these can lead to vulnerabilities that are much more challenging and costly to address after they have been exploited.

Remember, cybersecurity is not just about protecting data; it's about safeguarding your business's continuity and reputation. Ensuring that you are running updated versions of all software, like BEAR’s latest patch, is a critical step in this ongoing effort.

Staying Secure

Staying on top of WordPress security can feel overwhelming for small business owners without dedicated IT staff. At Your WP Guy, we exist to shoulder that burden for you. Our WordPress experts can fully audit, secure, maintain and support your site - so you can focus on growing your business with peace of mind.

Don't tackle security risks alone. Let us help you assess any impact from this vulnerability, update your plugins, and implement ongoing maintenance to avoid future threats. We treat your website like it's our own - because we know how critical it is for reaching your customers.

Get in touch for a free consultation today on making WordPress security stress-free. Call 678-995-5169 or book a call here. Our knowledgeable team is ready to help you safeguard your online presence.


BEAR Vulnerability – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net – Cross-Site Request Forgery to Notice Dismissal – CVE-2024-31430 | WordPress Plugin Vulnerability Report FAQs

Leave a Comment