WP Security CheckVulnerability data as of October 22, 2026

Known vulnerabilities in Nested Pages

Nested Pages provides a drag and drop interface for managing pages & posts in the WordPress admin, while maintaining quick edit functionality.

12Reported vulnerabilities
8.8Highest CVSS score
3.2.15Latest version
90,000+Active installs

What to do now

Update Nested Pages to 3.3.3 or later. 12 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 23, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2021-38343 Medium 6.1 0.8% 3.1.15 and earlier 3.1.16 August 30, 2021
CVE-2024-8759 Medium 4.8 0.4% Before 3.2.9 3.2.9 May 15, 2025
CVE-2025-0718 Medium 4.8 0.3% Before 3.2.13 3.2.13 March 23, 2025
CVE-2024-5943 High 8.8 0.3% Before 3.2.8 3.2.8 July 4, 2024
CVE-2022-1990 Medium 4.8 0.7% Before 3.1.21 3.1.21 June 27, 2022
CVE-2021-38342 High 8.1 0.5% 3.1.15 and earlier 3.1.16 August 30, 2021
CVE-2026-100512 High 7.5 0.3% 3.3.2 and earlier 3.3.3 September 30, 2026
WF-1a76571a-f820-4902-afa9-287b59a11d14 Medium 6.4 — 3.0.7 and earlier 3.0.8 March 26, 2019
CVE-2025-24579 Medium 4.4 0.4% 3.2.9 and earlier 3.2.10 January 24, 2025
CVE-2023-49195 Medium 4.4 0.4% 3.2.6 and earlier 3.2.7 December 1, 2023
CVE-2026-15233 Medium 4.4 0.2% 3.2.14 and earlier 3.2.15 July 27, 2026
CVE-2023-2434 Low 3.8 0.7% 3.2.3 and earlier 3.2.4 May 31, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.