title: Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF
description: The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
product: Bulk Page Creator
vendor: Unknown
versions:
lessThan: 1.1.4, status: affected, version: 1.1.4, versionType: custom
}