Nested Pages
Approved changes feed: RSS · Atom
cpe:2.3:a:kyle_phillips:nested_pages:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kyle Phillips (4d1ff6e7-9455-5b50-8bf0-c10dd66f2067) |
|---|---|
| Product | Nested Pages (6fbb85fa-6c0d-5511-a041-8ad5027f2978) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-24579 |
vulnerable | 2026-06-08 07:12:49.538281 |
WordPress Nested pages plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips Nested Pages wp-nested-pages allows Stored XSS.This issue affects Nested Pages: from n/a through <= 3.2.9.
Published: 2025-01-24T17:24:21.995Z
Updated: 2026-05-11T23:15:37.363Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49195 |
vulnerable | 2026-06-08 06:14:28.728332 |
WordPress Nested Pages Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips Nested Pages allows Stored XSS.This issue affects Nested Pages: from n/a through 3.2.6.
Published: 2023-12-14T15:39:26.529Z
Updated: 2026-04-28T16:08:56.717Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38343 |
vulnerable | 2026-06-08 05:32:55.931763 |
Nested Pages <= 3.1.15 Open Redirect
MEDIUM (4.7)
The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to an Open Redirect via the `page` POST parameter in the `npBulkActions`, `npBulkEdit`, `npListingSort`, and `npCategoryFilter` `admin_post` actions.
Published: 2021-08-30T18:05:15.116Z
Updated: 2024-09-17T03:53:12.499Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38342 |
vulnerable | 2026-06-08 05:32:55.930547 |
Nested Pages <= 3.1.15 Cross-Site Request Forgery to Arbitrary Post Deletion and Modification
HIGH (8.1)
The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to Cross-Site Request Forgery via the `npBulkAction`s and `npBulkEdit` `admin_post` actions, which allowed attackers to trash or permanently purge arbitrary posts as well as changing their status, reassigning their ownership, and editing other metadata.
Published: 2021-08-30T18:05:17.172Z
Updated: 2024-09-17T00:56:54.133Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.