The vulnerability is an SQL injection flaw that permits attackers to insert malicious SQL statements through unsanitized input, potentially enabling the reading or modification of sensitive database information; it is classified under CWE-89.

The BEAR woo-bulk-editor plugin from RealMag777, used within WordPress environments, is vulnerable in all releases up to and including version 1.1.7.1.

With a CVSS score of 7.6, the vulnerability carries moderate severity. The EPSS score is not available and it is not listed in CISA’s KEV catalog. The likely attack vector involves crafted requests to the plugin’s bulk edit interface, which may be accessible to authenticated users or possibly unauthenticated users depending on the site’s configuration. Exploitation would require sufficient access to the WordPress installation, and no vendor‑provided mitigations are indicated, making patching or removal of the affected component essential.