8.1
High
CVE-2021-38342 The Nested Pages WordPress…
Description
The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to Cross-Site Request Forgery via the `npBulkAction`s and `npBulkEdit` `admin_post` actions, which allowed attackers to trash or permanently purge arbitrary posts as well as changing their status, reassigning their ownership, and editing other metadata.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Nested Pages | 3.1.15 | No fix stated |
Other CVEs of Nested Pages
The 4 CVEs of Nested Pages →
CVE-2025-24579
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips…
5.9
Medium
CVE-2023-49195
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips…
5.9
Medium
CVE-2021-38343
The Nested Pages WordPress…
4.7
Medium