Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization, with AI-generated Chinese analysis, references, and POCs.

Vendor: nitropack

CVE IDTitleCVSSSeverityPublished
CVE-2025-8778 NitroPack <= 1.18.4 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update via nitropack_set_compression_ajax Function CWE-862 4.3 Medium2025-09-10
CVE-2024-11851 NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update CWE-862 4.3 Medium2025-01-15
CVE-2024-11848 NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update CWE-862 8.1 High2025-01-15

All 3 known CVE vulnerabilities affecting NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization with full Chinese analysis, references, and POCs where available.