CVE-2022-1611

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF.

Score

CVSS 3.1 8.8 High

Status

Modified - contact@wpscan.com

Published

2022-05-30

Last modified

2024-08-03

Weaknesses

CWE-352

Affected products

• Bulk Page Creator (Bulk Page Creator Project)
• Bulk Page Creator (Unknown)

References

• https://wpscan.com/vulnerability/3843b867-7784-4976-b5ab-8a1e7d45618a