CVE-2022-1611CWE-352

CVE-2022-1611: vulnerability in Bulk Page Creator

Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.6%
The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF.