Nitesh vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Nitesh products: 2 record(s), with severity, exploitation and fixes.

Ultimate Auction 2

Exploited only (KEV) →

CVE-2025-68084 Medium · 5.4 CWE-862 Dec 16, 2025

WordPress Ultimate Auction plugin <= 4.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Nitesh Ultimate Auction ultimate-auction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Auction : from n/a through <= 4.3.3.

CVE-2025-66125 Medium · 5.3 CWE-201 Dec 16, 2025

WordPress Ultimate Auction plugin <= 4.3.3 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Nitesh Ultimate Auction ultimate-auction allows Retrieve Embedded Sensitive Data.This issue affects Ultimate Auction : from n/a through <= 4.3.3.