CVE-2022-1611

Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF.

Affected

Bulk Page Creator

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.62% chance of exploitation in the next 30 days, 49th percentile

Published

2022-05-30

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/3843b867-7784-4976-b5ab-8a1e7d45618a

References

• CVE Record
• NVD entry