Vendor

NitroPack

6 known vulnerabilities.

Products

NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization 3 NitroPack 2 NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2024-11848 Public exploit

NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nitropack_dismiss_notice_forever' AJAX action in all versions up to, and including, 1.17.0. This makes it possible for authenticate…

NitroPack NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization Web / CMS

Jan 15, 2025