Read the docs

Bulk Creator Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Bulk Creator Project records in CISA KEV

No Bulk Creator Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bulk Creator 1 record LOW

Records

1 record in Bulk Creator · all components

TI-2022-00563 CVE-2022-0647 · GHSA-wj2h-vvmp-jmw2

Bulk Creator <= 1.0.1 - Reflected Cross-Site Scripting

Priority LOW 29

The Bulk Creator WordPress plugin through 1.0.1 does not sanitize and escape the post_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-28 No fix listed CWE-79
Open these records in search →