{"id":"CVE-2026-110019","revision":"e77de4854ad94d19b45a7524de57b3e9","records":[{"revision":"e77de4854ad94d19b45a7524de57b3e9","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-110019","aliases":[],"title":"Bulk Page Generator <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page Creation/Modification/Deletion via 'authorize' Parameter / Suite OAuth Flow","description":"The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to create, modify, and delete LPagery-managed WordPress pages and bulk page-generation processes that are otherwise restricted to administrators. On default fresh installations where Freemius has not been opted into, the AES-256-CBC key used to validate Bearer tokens collapses to the publicly known SHA-256 hash of an empty string, making the token entirely forgeable by any authenticated user.","state":0,"publishedAt":"2026-10-16T04:27:04.158+00:00","modifiedAt":"2026-10-16T16:02:36.966+00:00","affected":[{"ecosystem":"Vendor product","name":"Bulk Page Generator – LPagery","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"niklaslindemann\",\n                    \"product\": \"Bulk Page Generator – LPagery\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"status\": \"affected\",\n                            \"lessThanOrEqual\": \"3.1.0\",\n                            \"versionType\": \"semver\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","score":4.3,"severity":"MEDIUM"}],"references":["https://www.wordfence.com/threat-intel/vulnerabilities/id/c5b3f361-da53-42eb-b1fb-c0bfd641335b?source=cve","https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/suite/SuiteOAuthAuthorizeHandler.php#L11","https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/suite/SuiteRestApi.php#L416","https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/suite/TokenValidator.php#L30","https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/io/hooks/AdminMenuHooks.php#L91","https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.1"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110019","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-110019","identifiers":["CVE-2026-110019"]},"retained":false,"historicalAffected":[]}],"coverage":[]}