Sign in Free assessment

kylephillips records

8 published records for vendor kylephillips.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 25%
Median publish → KEV: No record has entered KEV

Records by year

21
22
23
24
25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-5943No exploit	Nested Pages <= 3.2.7 - Cross-Site Request Forgery to Local File Inclusionkylephillips · nested pages · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jul 4, 2024
32Monitor	CVE-2021-38342No exploit	Nested Pages <= 3.1.15 Cross-Site Request Forgery to Arbitrary Post Deletion and Modificationkylephillips · nested pages · CWE-352 Pre-auth CSRF	High8.1	—	0.5%	Aug 30, 2021
24Monitor	CVE-2021-38343No exploit	Nested Pages <= 3.1.15 Open Redirectkylephillips · nested pages · CWE-601 Pre-auth Open redirect	Medium6.1	—	0.8%	Aug 30, 2021
19Monitor	CVE-2022-1990No exploit	Nested Pages < 3.1.21 - Admin+ Stored Cross Site Scriptingkylephillips · nested pages · CWE-79 XSS	Medium4.8	—	0.7%	Jun 27, 2022
19Monitor	CVE-2023-49195No exploit	WordPress Nested Pages Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)kylephillips · nested pages · CWE-79 XSS	Medium4.8	—	0.4%	Dec 14, 2023
19Monitor	CVE-2024-8759No exploit	Nested Pages <= 3.2.8 - Editor+ Stored XSSkylephillips · nested pages · CWE-79 XSS	Medium4.8	—	0.3%	May 15, 2025
19Monitor	CVE-2025-0718No exploit	Nested Pages < 3.2.13 - Contributor+ Stored XSSkylephillips · nested pages · CWE-79 XSS	Medium4.8	—	0.3%	Mar 23, 2025
15Monitor	CVE-2023-2434No exploit	Nested Pages <= 3.2.3 - Missing Authorization to Authenticated (Editor+) Plugin Settings Resetkylephillips · nested pages · CWE-862 Broken access control (IDOR)	Low3.8	—	0.7%	May 31, 2023

CVE-2024-5943
35Monitor
Nested Pages <= 3.2.7 - Cross-Site Request Forgery to Local File Inclusion
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
kylephillips · nested pagesJul 4, 2024
CVE-2021-38342
32Monitor
Nested Pages <= 3.1.15 Cross-Site Request Forgery to Arbitrary Post Deletion and Modification
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- CSRF
kylephillips · nested pagesAug 30, 2021
CVE-2021-38343
24Monitor
Nested Pages <= 3.1.15 Open Redirect
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- Open redirect
kylephillips · nested pagesAug 30, 2021
CVE-2022-1990
19Monitor
Nested Pages < 3.1.21 - Admin+ Stored Cross Site Scripting
MediumCVSS 4.8No exploitEPSS 1%
- XSS
kylephillips · nested pagesJun 27, 2022
CVE-2023-49195
19Monitor
WordPress Nested Pages Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- XSS
kylephillips · nested pagesDec 14, 2023
CVE-2024-8759
19Monitor
Nested Pages <= 3.2.8 - Editor+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%
- XSS
kylephillips · nested pagesMay 15, 2025
CVE-2025-0718
19Monitor
Nested Pages < 3.2.13 - Contributor+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%
- XSS
kylephillips · nested pagesMar 23, 2025
CVE-2023-2434
15Monitor
Nested Pages <= 3.2.3 - Missing Authorization to Authenticated (Editor+) Plugin Settings Reset
LowCVSS 3.8No exploitEPSS 1%
- Broken access control (IDOR)
kylephillips · nested pagesMay 31, 2023