Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-52121 EUVD-2023-56795GHSA-r45q-p466-5ghh

WordPress NitroPack Plugin <= 1.10.2 is vulnerable to Cross Site Request Forgery (CSRF)

Published Jan 5, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: NitroPack Product: NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images

Description

Cross-Site Request Forgery (CSRF) vulnerability in NitroPack Inc. NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images.This issue affects NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images: from n/a through 1.10.2.

Affected products

VendorProductAffectedFixed
NitroPack NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images ≤ 1.10.2 —

References