Skip to content
OpenAdvisories

Vendor

Kyle Phillips

6 known vulnerabilities.

Products

Nested Pages 4 Favorites 1 Simple Locator 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-24579

    WordPress Nested pages plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips Nested Pages wp-nested-pages allows Stored XSS.This issue affects Nested Pages: from n/a through <= 3.2.9.

    Kyle Phillips Nested Pages
  • Medium 5.9
    CVE-2023-49195

    WordPress Nested Pages Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips Nested Pages allows Stored XSS.This issue affects Nested Pages: from n/a through 3.2.6.

    Kyle Phillips Nested Pages
  • Medium 4.7
    CVE-2021-38343

    Nested Pages <= 3.1.15 Open Redirect

    The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to an Open Redirect via the `page` POST parameter in the `npBulkActions`, `npBulkEdit`, `npListingSort`, and `npCategoryFilter` `admin_post` actions.

    Kyle Phillips Nested Pages Web / CMS