CVE-2026-39669

14th percentile - higher than 14% of all known CVEs

The NitroPack WordPress plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects all versions from n/a through 1.19.3.

An attacker can gain unauthorized access to administrative functions or sensitive data, potentially leading to privilege escalation and system integrity compromise.

Immediately update the NitroPack plugin to the latest available version and verify access control configuration.