CVE Feed

    Dashboard / CVE / CVE-2023-52121

    CVE-2023-52121

    Cross-Site Request Forgery (CSRF) vulnerability in NitroPack Inc. NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images.This issue affects NitroPack – Cache & Speed Optimization for Core Web Vitals, Defer CSS & JavaScript, Lazy load Images: from n/a through 1.10.2.

    Published:Jan 5, 2024
    Last Modified:Apr 28, 2026
    EPS:Jan 5, 2024
    EPSS Score:0.00051
    CVSS Score:5.4

    Affected Products

    Vendor
    Nitropack
    Product
    Nitropack

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-44372 (CVSS 5.3) — Nitro is a next generation server toolkit. Prior to 3.0.260429-beta, an attacker could turn a redirect route r…
    CVE-2026-39669 (CVSS 5.3) — Missing Authorization vulnerability in NitroPack allows Exploiting Incorrectly Configured Access Control Secur…
    CVE-2025-8778 (CVSS 4.3) — The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil…
    CVE-2024-11851 (CVSS 4.3) — The NitroPack plugin for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing c…
    CVE-2024-11848 (CVSS 8.1) — The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabil…
    CVE-2024-43922 (CVSS 4.8) — Improper Control of Generation of Code ('Code Injection') vulnerability in NitroPack Inc. NitroPack allows Cod…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High