{"schema":"threatline.record/2","record":{"id":"CVE-2026-110019","aliases":[],"summary":"Bulk Page Generator <= 3.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Page Creation/Modification/Deletion via 'authorize' Parameter / Suite OAuth Flow","details":"The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to create, modify, and delete LPagery-managed WordPress pages and bulk page-generation processes that are otherwise restricted to administrators. On default fresh installations where Freemius has not been opted into, the AES-256-CBC key used to validate Bearer tokens collapses to the publicly known SHA-256 hash of an empty string, making the token entirely forgeable by any authenticated user.","categories":["Unclassified"],"product":"Bulk Page Generator – LPagery","vendor":"niklaslindemann","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-110019","source_modified_at":"2026-10-16T16:02:36.966Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Bulk Page Generator – LPagery","vendor":"niklaslindemann","versions":[{"version":"0","status":"affected","lessThanOrEqual":"3.1.0","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":4.3,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00222,"percentile":0.12067,"score_date":"2026-10-23"},"published_at":"2026-10-16T04:27:04.158Z","modified_at":"2026-10-16T16:02:36.966Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-110019","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-16T16:02:36.966Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-110019","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c5b3f361-da53-42eb-b1fb-c0bfd641335b?source=cve"},{"source":"CVE List","url":"https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/suite/SuiteOAuthAuthorizeHandler.php#L11"},{"source":"CVE List","url":"https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/suite/SuiteRestApi.php#L416"},{"source":"CVE List","url":"https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/suite/TokenValidator.php#L30"},{"source":"CVE List","url":"https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.0/src/io/hooks/AdminMenuHooks.php#L91"},{"source":"CVE List","url":"https://plugins.trac.wordpress.org/browser/lpagery/tags/3.1.1"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-16T16:02:01.364182Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-16T16:02:36.966Z","content_hash":"6c46b0d9431af27872b55dee36d718b1f6d8414aeaa85bfca5df6ddd719b8811"}}