Skip to content
OpenAdvisories

Vendor

Kyle Phillips

11 known vulnerabilities.

Products

Nested Pages 6 Favorites 3 Simple Locator 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2025-60202

    WordPress Favorites plugin <= 2.3.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Kyle Phillips Favorites favorites allows PHP Local File Inclusion.This issue affects Favorites: from n/a through <= 2.3.6.

    Kyle Phillips Favorites
  • High 7.1
    CVE-2025-22513

    WordPress Simple Locator Plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips Simple Locator simple-locator allows Reflected XSS.This issue affects Simple Locator: from n/a through <= 2.0.4.

    Kyle Phillips Simple Locator
  • High 8.8
    CVE-2024-5943

    Nested Pages <= 3.2.7 - Cross-Site Request Forgery to Local File Inclusion

    The Nested Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.7. This is due to missing or incorrect nonce validation on the 'settingsPage' function and missing santization of the 'tab' parameter. …

    Kyle Phillips Nested Pages Web / CMS
  • High 8.1
    CVE-2021-38342

    Nested Pages <= 3.1.15 Cross-Site Request Forgery to Arbitrary Post Deletion and Modification

    The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to Cross-Site Request Forgery via the `npBulkAction`s and `npBulkEdit` `admin_post` actions, which allowed attackers to trash or permanently purge arbitrary posts as well as changing their status, rea…

    Kyle Phillips Nested Pages Web / CMS