NitroPack vulnerabilities
4 published CVEs name NitroPack among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-39669
WordPress NitroPack plugin <= 1.19.3 - Broken Access Control vulnerability
NitroPack · NitroPack
Medium5.3 - CVE-2025-8778
NitroPack <= 1.18.4 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update via nitropack_set_compression_ajax Function
nitropack · NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization
Medium4.3 - CVE-2024-11851
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update
nitropack · NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization
Medium4.3 - CVE-2024-11848
NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
nitropack · NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization
High8.1