Log in Start free

NitroPack

Products

ProductCVEsExploitedLatest
NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization3–Sep 10, 2025
NitroPack1–Apr 8, 2026

Exploited and recent CVEs

  • CVE-2026-39669 Medium 5.3 WordPress NitroPack plugin <= 1.19.3 - Broken Access Control vulnerability 0.2%
  • CVE-2025-8778 Medium 4.3 NitroPack <= 1.18.4 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update via nitropack_set_compression_ajax Function 0.2%
  • CVE-2024-11851 Medium 4.3 NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update 0.3%
  • CVE-2024-11848 High 8.1 NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update 0.7%