8.1
Élevée
CVE-2021-38342 The Nested Pages WordPress…
Description
The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to Cross-Site Request Forgery via the `npBulkAction`s and `npBulkEdit` `admin_post` actions, which allowed attackers to trash or permanently purge arbitrary posts as well as changing their status, reassigning their ownership, and editing other metadata.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Nested Pages | 3.1.15 | Pas de correctif indiqué |
Autres CVE de Nested Pages
Les 4 CVE de Nested Pages →
CVE-2025-24579
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips…
5.9
Moyenne
CVE-2023-49195
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kyle Phillips…
5.9
Moyenne
CVE-2021-38343
The Nested Pages WordPress…
4.7
Moyenne