Nitropack Nitropack vulnerabilities

• nitrojs nitropack WordPress NitroPack plugin <= 1.19.3 - Broken Access Control vulnerability CVE-2026-39669 5.3 MediumApril 8, 2026
• nitropack – performance, page speed & cache plugin for core web vitals, cdn & image optimization NitroPack <= 1.18.4 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update via nitropack_set_compression_ajax Function CVE-2025-8778 4.3 MediumSeptember 10, 2025
• nitropack – performance, page speed & cache plugin for core web vitals, cdn & image optimization NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update CVE-2024-11851 4.3 MediumJanuary 15, 2025
• nitropack – performance, page speed & cache plugin for core web vitals, cdn & image optimization NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update CVE-2024-11848 Public exploit 8.1 HighJanuary 15, 2025
• nitrojs nitropack WordPress NitroPack plugin <= 1.16.7 - Unauthenticated Arbitrary Shortcode Execution vulnerability CVE-2024-43922 4.8 MediumAugust 29, 2024
• nitropack, nitropack inc. – cache & speed optimization for core web vitals, defer css & javascript, lazy load images +1 more WordPress NitroPack Plugin <= 1.10.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-52121 5.4 MediumJanuary 5, 2024