Nested Pages Security Vulnerabilities and Issues — Nested Pages CVE List

Lucene search

KylephillipsNested Pages

2 matches found

CVE•added 2025/03/23 6:15 a.m.•55 views

CVE-2025-0718

The Nested Pages WordPress plugin before 3.2.13 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

4.8CVSS5.8AI score0.00052EPSS

CVE•added 2025/05/15 8:15 p.m.•14 views

CVE-2024-8759

The Nested Pages WordPress plugin before 3.2.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

4.8CVSS5.7AI score0.00046EPSS