Read the docs

NerdPress

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

NerdPress records in CISA KEV

No NerdPress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smart Custom 404 Error Page 1 record LOW

Records

4 records

TI-2023-26852 CVE-2023-49193 · GHSA-h49h-j7pc-4p78

WordPress Grow Social plugin <= 1.30.0 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in NerdPress Hubbub Lite social-pug allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hubbub Lite: from n/a through <= 1.30.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0047 Published 2024-12-09 No fix listed CWE-862
TI-2024-08540 CVE-2024-9204 · GHSA-8q9m-fx9g-p437

Smart Custom 404 Error Page <= 11.4.7 - Reflected Cross-Site Scripting

Priority LOW 28

The Smart Custom 404 Error Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI'] in all versions up to, and including, 11.4.7 due to insufficient input sanitization and out…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00462 Published 2024-10-04 No fix listed CWE-79
TI-2025-35859 CVE-2025-58007 · GHSA-9778-hpmv-mx63

WordPress Social Pug Plugin <= 1.35.2 - Sensitive Data Exposure Vulnerability

Priority LOW 20

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NerdPress Hubbub Lite social-pug allows Retrieve Embedded Sensitive Data.This issue affects Hubbub Lite: from n/a through <= 1.3…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00292 Published 2025-09-22 No fix listed CWE-497
Open these records in search →