Skip to content
Noroxi

NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization

nitropack · plugin

Known security vulnerabilities for NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

1 critical · 1 with public exploit code · latest Apr 8, 2026

Vulnerabilities

  • CVE-2024-43922

    WordPress NitroPack plugin <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution vulnerability

    Critical 9.8

  • CVE-2023-52121

    WordPress NitroPack Plugin <= 1.10.2 is vulnerable to Cross Site Request Forgery (CSRF)

    High 8.8

  • CVE-2024-11848

    NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

    High 8.1

  • CVE-2026-39669

    WordPress NitroPack plugin <= 1.19.3 - Broken Access Control vulnerability

    Medium 5.3

  • CVE-2025-8778

    NitroPack <= 1.18.4 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update via nitropack_set_compression_ajax Function

    Medium 4.3

  • CVE-2024-11851

    NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update

    Medium 4.3

← Back to directory