CVE-2021-38343

Nested Pages <= 3.1.15 Open Redirect

CVSS 4.7 MEDIUMEPSS 0.8%CWE-601

The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to an Open Redirect via the `page` POST parameter in the `npBulkActions`, `npBulkEdit`, `npListingSort`, and `npCategoryFilter` `admin_post` actions.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Affected products

Kyle Phillips · Nested Pages

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.wordfence.com/blog/2021/08/nested-pages-pat%E2%80%A6on-vulnerability/