NACC WordPress Plugin

NACC WordPress Plugin has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for NACC WordPress Plugin has a vendor fix available, so running the current release closes it.

All of these findings were reported by Muhammad Yudha - DJ. NACC WordPress Plugin is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all NACC WordPress Plugin vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-12506

NACC WordPress Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2024-12-19 18:08	NACC WordPress Plugin <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting NACC WordPress Plugin <= 4.1.0	`CVE-2024-12506`	6.4 Medium	Muhammad Yudha - DJ	Yes

Showing 1–1 of 1 reports

Plugin Profile

Latestv6.0.2

NACC WordPress Plugin

Author

BMLTGuy

5.0(1)

100/100

Last Updated

2026-07-17 (2mo ago)

Active Installs

100+

Downloads

6,628

Requires WP

5.3+

Requires PHP

8.0+

Tested up to

WP 7.0.4

Created

2009-06-25 (18y ago)

This is a WordPress plugin implementation of the N.A. Cleantime Calculator. To use this, specify [nacc] in your text code. That text will be replaced with this cleantime calculator.

View on WordPress.org