Login Request a demo
NP
Product
Nested Pages
by Kylephillips · last CVE May 15, 2025
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 2Medium 5Low 1
Severity
All severities8Critical0High2Medium5Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Nested Pages to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-5943
8.8
0%
Jul 4
The Nested Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.7
Affected: before 3.2.8
CVE-2021-38342
8.1
0%
Aug 30
The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to Cross-Site Request Forgery via the `npBulkAction`s and `npBulkEdit` `admin_post` actions, which allowed attackers to…
Affected: through 3.1.15
CVE-2021-38343
6.1
1%
Aug 30
The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to an Open Redirect via the `page` POST parameter in the `npBulkActions`, `npBulkEdit`, `npListingSort`, and…
Affected: through 3.1.15
CVE-2024-8759
4.8
0%
May 15
Nested Pages <= 3.2.8 - Editor+ Stored XSS
Affected: before 3.2.9
CVE-2025-0718
4.8
0%
Mar 23
Nested Pages < 3.2.13 - Contributor+ Stored XSS
Affected: before 3.2.13
CVE-2023-49195
4.8
0%
Dec 14
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips Nested Pages allows Stored XSS.This issue affects Nested Pages:…
Affected: through 3.2.6
CVE-2022-1990
4.8
1%
Jun 27
The Nested Pages WordPress plugin before 3.1.21 does not escape and sanitize the some of its settings, which could allow high privilege users to perform Stored Cross-Site…
Affected: before 3.1.21
CVE-2023-2434
3.8
1%
May 31
The Nested Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'reset' function in versions up to, and including, 3.2.3
Affected: through 3.2.3
Showing 8