CVE-2022-1611CWE-352

Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF

published May 30, 2022

CVSS
—
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00624 · 49.3th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-05-30T08:36Z
EPSS history
Timeline
  • 30 MAY 08:36Z
    Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF
    cvelistv5