No Update Nag
1 CVEs
product
Monthly
The No Update Nag plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.12. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
WordPress
PHP
Information Disclosure
No Update Nag
NVD
CVSS 3.1
5.3
EPSS
0.3%
EPSS 0%
CVSS 5.3
MEDIUM
This Month
The No Update Nag plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.12. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
WordPress
PHP
Information Disclosure
+1
NVD