Vulnerabilities

TI-2025-22642 CVE-2025-31461 · GHSA-296v-93wv-2fxf

WordPress NanoSupport plugin <= 0.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mayeenul Islam NanoSupport nanosupport allows Reflected XSS.This issue affects NanoSupport: from n/a through <= 0.6.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-04-01 No fix listed CWE-79

TI-2025-22557 CVE-2025-31376 · GHSA-j2w7-54m4-w37p

WordPress NanoSupport plugin <= 0.6.0 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Mayeenul Islam NanoSupport nanosupport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects NanoSupport: from n/a through <= 0.6.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00237 Published 2025-03-31 No fix listed CWE-862

Vulnerabilities

Filters

WordPress NanoSupport plugin <= 0.6.0 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress NanoSupport plugin <= 0.6.0 - Broken Access Control vulnerability