Kylephillips vulnerabilities
We track 1 vulnerability in Kylephillips products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 4, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Kylephillips vulnerabilities
- 8.8 High severity
Nested Pages: Cross-Site Request Forgery
The Nested Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.7. This is due to missing or incorrect nonce validation on the 'settingsPage' function and missing santization of the 'tab' parameter. T