Plugin icon

NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization

nitropack

Vulnerabilities:

7

Last Updated:

April 21, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-02-18
Title
NitroPack < 1.19.4 - Missing Authorization
Fixed in
Fixed in 1.19.4
CVSS
5.3 (medium)
Published
2025-09-09
Title
NitroPack < 1.18.5 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update via nitropack_set_compression_ajax Function
Fixed in
Fixed in 1.18.5
CVSS
4.3 (medium)
Published
2025-01-14
Title
NitroPack < 1.17.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update
Fixed in
Fixed in 1.17.6
CVSS
4.3 (medium)
Published
2025-01-14
Title
NitroPack < 1.17.6 - Subscriber+ Limited Options Update
Fixed in
Fixed in 1.17.6
CVSS
8.1 (high)
Published
2024-08-26
Title
NitroPack < 1.16.8 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 1.16.8
CVSS
7.3 (high)
Published
2023-12-28
Title
NitroPack < 1.10.3 - Multiple CSRF
Fixed in
Fixed in 1.10.3
CVSS
4.3 (medium)
Published
2023-11-07
Title
NitroPack < 1.10.0 - Missing Authorization via multiple AJAX functions
Fixed in
Fixed in 1.10.0
CVSS
6.3 (medium)