NitroPack vulnerabilities
We track 3 vulnerabilities in NitroPack products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 15, 2025.
Latest NitroPack vulnerabilities
- 8.1 High severity
NitroPack – Performance, Page Speed & Cache…: Missing Authorization
The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nitropack_dismiss_notice_forever' AJAX action in all versions up to, and including, 1.17.0. This makes it possible for authenticated
- 9.8 Critical severity
NitroPack: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in NitroPack Inc. NitroPack allows Code Injection.This issue affects NitroPack: from n/a through 1.16.7.
- 8.8 High severity
NitroPack – Cache & Speed Optimization for…: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in NitroPack Inc. NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images.This issue affects NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & Ja