CVE-2021-38343

2021-08-3019:15:09

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.2%

JSON

The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to an Open Redirect via the page POST parameter in the npBulkActions, npBulkEdit, npListingSort, and npCategoryFilter admin_post actions.

CPENameOperatorVersion
wp-nested-pageseq1.3.13
wp-nested-pageseq1.6.4
wp-nested-pageseq3.0.11
wp-nested-pageseq3.0.8
wp-nested-pageseq1.6.5
wp-nested-pageseq3.1.8
wp-nested-pageseq3.1.10
wp-nested-pageseq3.1.12
wp-nested-pageseq3.1.4
wp-nested-pageseq1.5.4

Name	Operator	Version
wp-nested-pages	eq	1.3.13
wp-nested-pages	eq	1.6.4
wp-nested-pages	eq	3.0.11
wp-nested-pages	eq	3.0.8
wp-nested-pages	eq	1.6.5
wp-nested-pages	eq	3.1.8
wp-nested-pages	eq	3.1.10
wp-nested-pages	eq	3.1.12
wp-nested-pages	eq	3.1.4
wp-nested-pages	eq	1.5.4