WordPress NitroPack Plugin <= 1.16.7 is vulnerable to Broken Access Control

Software NitroPack Type Plugin Vulnerable versions = 1.16.7 Fixed in 1.16.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43922 Patch priority Low CVSS severity Low 4.8 Developer Claim ownership PSID 68fa122dccba Credits Rafie Muhammad Patchstack Require...

CVE-2023-52121 WordPress NitroPack Plugin <= 1.10.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in NitroPack Inc. NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images.This issue affects NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images: from n/a...