Nerdpress

2 CVEs across 2 Nerdpress products. Browse Nerdpress vulnerabilities, severities, and proof-of-concept exploits.

Nerdpress products with known CVEs

ProductCVEs
Hubbub Lite3
Smart Custom 404 Error Page1
Nerdpress CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-27403Medium6.52026-07-23Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NerdPress Hubbub Lite allows Stored XSS. This issue affe…
CVE-2025-58007Medium4.32025-09-22Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NerdPress Hubbub Lite social-pug allows Retrieve Embedded Sensitive…
CVE-2023-49193Medium5.32024-12-09Missing Authorization vulnerability in NerdPress Hubbub Lite social-pug allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe…
CVE-2024-9204Medium6.12024-10-04The Smart Custom 404 Error Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI'] in all versions up to, and inc…