← WordPress Vulnerabilities
WordPress security by component

Bulk Content Creator

Bulk Content Creator is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 24, 2025; the highest published CVSS base score is 4.3.

Plugin slug: bulk-content-creator

CVE-2025-27311: Bulk Content Creator: Cross-site request forgery

Bulk Content Creator is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.

PublishedFeb 24, 2025
Safe version guidanceSee mitigation notes
Published vulnerabilities for bulk-content-creator
Safe version
Feb 24, 2025 CVE-2025-27311
Bulk Content Creator: Cross-site request forgery
Bulk Content Creator is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
See mitigation notes
CVE4.3
NVDPending