CVE-2025-0718
📋 TL;DR
The Nested Pages WordPress plugin before version 3.2.13 contains a stored cross-site scripting (XSS) vulnerability in its settings. This allows authenticated users with contributor-level privileges or higher to inject malicious scripts that execute when other users view affected pages. The vulnerability bypasses WordPress's unfiltered_html restriction, making it particularly dangerous in multisite installations.
💻 Affected Systems
- WordPress Nested Pages plugin
📦 What is this software?
Nested Pages by Kylephillips
⚠️ Risk & Real-World Impact
Worst Case
Malicious contributor could inject scripts that steal administrator credentials, redirect users to malicious sites, or perform actions as other users when they view compromised pages.
Likely Case
Authenticated attackers with contributor access inject malicious JavaScript that executes in victims' browsers when viewing plugin settings pages, potentially stealing session cookies or performing unauthorized actions.
If Mitigated
With proper user access controls and regular plugin updates, impact is limited to low-privilege script injection that may be blocked by modern browser security features.
🎯 Exploit Status
Exploitation requires contributor-level access or higher. The vulnerability is in plugin settings, making it straightforward to exploit once authenticated.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 3.2.13
Vendor Advisory: https://wpscan.com/vulnerability/69ddd8eb-33f1-49cf-9428-3d89262b1887/
Restart Required: No
Instructions:
1. Log into WordPress admin panel. 2. Navigate to Plugins > Installed Plugins. 3. Find Nested Pages plugin. 4. Click 'Update Now' if available. 5. Alternatively, download version 3.2.13+ from WordPress repository and manually update.
🔧 Temporary Workarounds
Temporary plugin deactivation
allDisable the Nested Pages plugin until patched
wp plugin deactivate nested-pages
Restrict user capabilities
allTemporarily remove contributor role or restrict plugin access
🧯 If You Can't Patch
- Implement strict user access controls and limit contributor privileges
- Enable WordPress security plugins with XSS protection and input validation
🔍 How to Verify
Check if Vulnerable:
Check WordPress admin panel > Plugins > Nested Pages for version number below 3.2.13Check Version:
wp plugin get nested-pages --field=versionVerify Fix Applied:
Confirm plugin version is 3.2.13 or higher in WordPress admin📡 Detection & Monitoring
Log Indicators:
- Unusual plugin setting modifications by contributor users
- JavaScript injection patterns in plugin settings
Network Indicators:
- Unexpected script loads from plugin settings pages
SIEM Query:
source="wordpress" AND (event="plugin_settings_update" OR event="plugin_modified") AND user_role="contributor" AND plugin="nested-pages"