Kyle Phillips

Products

ProductCVEsExploitedLatest
Nested Pages4–Jan 24, 2025
Favorites1–Nov 6, 2025
Simple Locator1–Jan 27, 2025

Exploited and recent CVEs

  • CVE-2025-60202 High 7.5 WordPress Favorites plugin <= 2.3.6 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-22513 High 7.1 WordPress Simple Locator Plugin <= 2.0.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-24579 Medium 5.9 WordPress Nested pages plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-49195 Medium 5.9 WordPress Nested Pages Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2021-38342 High 8.1 Nested Pages <= 3.1.15 Cross-Site Request Forgery to Arbitrary Post Deletion and Modification 0.5%
  • CVE-2021-38343 Medium 4.7 Nested Pages <= 3.1.15 Open Redirect 0.8%