CVE-2022-1611

CVE-2022-1611: Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF

Vendor Unknown

Product Bulk Page Creator

Weakness CWE-352 · CSRF

Published May 30, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF.

Key dates

02Disclosure timeline

May 30, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1611 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/352.html