CVE-2026-1081

Name of the Vulnerable Software and Affected Versions Set Bulk Post Categories plugin for WordPress versions up to and including 1.1

Description The plugin is susceptible to Cross-Site Request Forgery (CSRF) due to the absence of nonce validation in the bulk category update functionality. This allows unauthenticated attackers to modify post categories in bulk by deceiving a site administrator into performing an action, such as clicking a malicious link.

Recommendations Update the Set Bulk Post Categories plugin to a version beyond 1.1.