The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF.
CVSS 3.1HIGH 8.8·Network·No auth·User interaction·EPSS 0.00624·Published 2022-05-30·Fixed in 1.1.4CWE-352