← Database

CVE-2021-38343

MEDIUM CVSS: 4.7 Published: 2021-08-30 Modified: 2026-06-17

Description

The Nested Pages WordPress plugin <= 3.1.15 was vulnerable to an Open Redirect via the `page` POST parameter in the `npBulkActions`, `npBulkEdit`, `npListingSort`, and `npCategoryFilter` `admin_post` actions.

Affected Platforms

Kylephillips Nested Pages

Weakness Type

CWE-601, CWE-601

References