What’s Vulnerable › Products

Nested Pages vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Nested Pages version is affected

Latest Nested Pages vulnerabilities

• CVE-2026-15233 — Nested Pages < 3.2.15 - Editor+ Stored XSS via Post Title (CVSS 4.8)
• CVE-2024-8759 — Nested Pages <= 3.2.8 - Editor+ Stored XSS (CVSS 4.8)
• CVE-2025-0718 — Nested Pages < 3.2.13 - Contributor+ Stored XSS (CVSS 4.8)
• CVE-2025-24579 — WordPress Nested pages plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2024-5943 — Nested Pages <= 3.2.7 - Cross-Site Request Forgery to Local File Inclusion (CVSS 8.8)
• CVE-2023-49195 — WordPress Nested Pages Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
• CVE-2023-2434 — Nested Pages <= 3.2.3 - Missing Authorization to Authenticated (Editor+) Plugin Settings Reset (CVSS 3.8)
• CVE-2022-1990 — Nested Pages < 3.1.21 - Admin+ Stored Cross Site Scripting (CVSS 4.8)
• CVE-2021-38343 — Nested Pages <= 3.1.15 Open Redirect (CVSS 6.1)
• CVE-2021-38342 — Nested Pages <= 3.1.15 Cross-Site Request Forgery to Arbitrary Post Deletion and Modification (CVSS 8.1)