CVE-2024-5943

CVE-2024-5943 — The Nested Pages WordPress plugin is vulnerable to Cross-Site Request Forgery in all versions up to 3.2.7. The issue arises from missing or incorrect nonce validation in the settingsPage function and missing sanitization of the tab parameter. This allows unauthenticated attackers ...

CVE-2025-0718

The Nested Pages WordPress plugin, in versions before 3.2.13 , contains a vulnerability where it fails to sanitise and escape certain settings. This flaw allows high-privilege users, such as contributors , to perform Stored Cross-Site Scripting (XSS) attacks. Notably, the attack is possible even ...

CVE-2022-1990

CVE-2022-1990 affects the WordPress Nested Pages plugin prior to version 3.1.21. The vulnerability arises because the plugin does not escape and sanitize certain settings, enabling Stored Cross-Site Scripting when unfiltered_html is disallowed. Public sources across Red Hat, NVD, CNVD, OSV, and P...

CVE-2024-8759

The Nested Pages WordPress plugin (versions prior to 3.2.9 ) is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the insufficient sanitization and escaping of certain plugin settings. This flaw allows high-privilege users, such as administrators, to execute stored XSS, ...