CVE-2026-84024

The BEAR WordPress plugin prior to version 1.2.2 is vulnerable due to a lack of CSRF nonce verification, enabling an attacker to manipulate the plugin's meta field configuration by deceiving a logged-in administrator into accessing a malicious page. This could lead to unauthorized changes in the plugin settings, potentially compromising the integrity of the WordPress site. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.