No Update Nag
No Update Nag has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).
The one issue recorded for No Update Nag has a vendor fix available, so running the current release closes it.
All of these findings were reported by stealthcopter. No Update Nag is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-7412No Update Nag <= 1.4.12 - Unauthenticated Full Path Disclosure
Read the full analysisVulnerability Records
No Update Nag
Author
Scott Reilly
This plugin removes the WordPress update nag that appears at the top of all admin pages when a new version of WordPress is released. Tired of WordPress nagging you about a new release? Maybe you already know about it and want to hold off on an update and would rather not see the update nag on every admin page you visit. Activate this plugin and be bothered no more! The status of your version of WordPress (be it current or out-of-date) is still reflected in the footer of your admin pages and in the update count link in the admin bar. And certainly, of course, I don’t advocate completely ignoring the fact that updates often contain fixes for critical bugs or exploits. However, there are various other means of learning about updates; and once known, not everyone is able or willing to update immediately. Links: Plugin Homepage | Plugin Directory Page | GitHub | Author Homepage
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C