Skip to content
OpenAdvisories

Product · Kyle Phillips

Nested Pages

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-5943

    Nested Pages <= 3.2.7 - Cross-Site Request Forgery to Local File Inclusion

    The Nested Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.7. This is due to missing or incorrect nonce validation on the 'settingsPage' function and missing santization of the 'tab' parameter. …

    Kyle Phillips Nested Pages Web / CMS
  • High 8.1
    CVE-2021-38342

    Nested Pages <= 3.1.15 Cross-Site Request Forgery to Arbitrary Post Deletion and Modification

    The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to Cross-Site Request Forgery via the `npBulkAction`s and `npBulkEdit` `admin_post` actions, which allowed attackers to trash or permanently purge arbitrary posts as well as changing their status, rea…

    Kyle Phillips Nested Pages Web / CMS