CVE-2022-1611: Bulk Page Creator Project Bulk Page Creator

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF.

Affected products

• Bulk Page Creator Project Bulk Page Creator: before 1.1.4 (fixed in 1.1.4)

Published 2022-05-30. Last modified 2026-06-17.