KY
Vendor
Kylephillips
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-8759 | NP Nested Pages Kylephillips | 4.8 | May 15 | Nested Pages <= 3.2.8 - Editor+ Stored XSS |
| CVE-2025-0718 | NP Nested Pages Kylephillips | 4.8 | Mar 23 | Nested Pages < 3.2.13 - Contributor+ Stored XSS |
| CVE-2024-12501 | SL Simple Locator kylephillips | 6.4 | Dec 14 | Simple Locator <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-5943 | NP Nested Pages Kylephillips | 8.8 | Jul 4 | The Nested Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.7 |
| CVE-2023-49195 | NP Nested Pages Kylephillips | 4.8 | Dec 14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips Nested Pages allows Stored XSS.This issue affects Nested Pages:… |
| CVE-2023-2434 | NP Nested Pages Kylephillips | 3.8 | May 31 | The Nested Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'reset' function in versions up to, and including, 3.2.3 |
| CVE-2022-1990 | NP Nested Pages Kylephillips | 4.8 | Jun 27 | The Nested Pages WordPress plugin before 3.1.21 does not escape and sanitize the some of its settings, which could allow high privilege users to perform Stored Cross-Site… |
| CVE-2021-38343 | NP Nested Pages Kylephillips | 6.1 | Aug 30 | The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to an Open Redirect via the `page` POST parameter in the `npBulkActions`, `npBulkEdit`, `npListingSort`, and… |
| CVE-2021-38342 | NP Nested Pages Kylephillips | 8.1 | Aug 30 | The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to Cross-Site Request Forgery via the `npBulkAction`s and `npBulkEdit` `admin_post` actions, which allowed attackers to… |