Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2026/02/20 1:27 p.m.1 views

CVE-2026-25332

Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through = 2.2.9...

5.3CVSS5.5AI score0.00014EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.2 views

CVE-2026-25332

Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through = 2.2.9...

5.3CVSS0.00014EPSS
Exploits0References1
CVE
CVE
added 2026/02/19 8:26 a.m.6 views

CVE-2026-25332

CVE-2026-25332 affects the WordPress Endless Posts Navigation plugin (versions up to 2.2.9). The issue is Missing Authorization / Broken Access Control due to incorrectly configured access control, enabling exploitation without privileges. The connected documents do not specify a concrete fix ver...

5.3CVSS5.4AI score0.00014EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/19 8:26 a.m.23 views

CVE-2026-25332 WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through = 2.2.9...

5.3CVSS0.00014EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:26 a.m.2 views

CVE-2026-25332

Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through = 2.2.9...

5.5AI score0.00014EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/19 8:26 a.m.2 views

CVE-2026-25332 WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through = 2.2.9...

5.3CVSS5.5AI score0.00014EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.3 views

WordPress plugin Endless Posts Navigation 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.3CVSS5.8AI score0.00014EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/07 7:28 a.m.2 views

WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Endless Posts Navigation versions = 2.2.9...

5.3CVSS5.4AI score0.00014EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-43492

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00257EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:52 a.m.2 views

CVE-2024-49629

Cross-Site Request Forgery CSRF vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through = 2.2.7...

7.1CVSS5.9AI score0.00257EPSS
Exploits0References1
NVD
NVD
added 2024/10/20 10:15 a.m.13 views

CVE-2024-49629

Cross-Site Request Forgery CSRF vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through = 2.2.7...

7.1CVSS0.00257EPSS
Exploits0References1
OSV
OSV
added 2024/10/20 10:15 a.m.0 views

CVE-2024-49629

Cross-Site Request Forgery CSRF vulnerability in Fahad Mahmood Endless Posts Navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through 2.2.7...

6.1CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/20 10:5 a.m.9 views

CVE-2024-49629 WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Fahad Mahmood Endless Posts Navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through 2.2.7...

7.1CVSS6.8AI score0.00257EPSS
Exploits0References1
CVE
CVE
added 2024/10/20 10:5 a.m.42 views

CVE-2024-49629

CVE-2024-49629 concerns the WordPress plugin Endless Posts Navigation (versions

7.1CVSS5.9AI score0.00257EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/20 10:5 a.m.17 views

CVE-2024-49629 WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through = 2.2.7...

7.1CVSS0.00257EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/20 12:0 a.m.2 views

PT-2024-33584 · WordPress · Endless Posts Navigation

Name of the Vulnerable Software and Affected Versions: Endless Posts Navigation versions n/a through 2.2.7 Description: A Cross-Site Request Forgery CSRF issue in Endless Posts Navigation allows Stored XSS. This means an attacker can perform actions on behalf of a user without their knowledge,...

7.1CVSS6.9AI score0.00257EPSS
Exploits0References8
Patchstack
Patchstack
added 2024/10/18 1:2 p.m.2 views

WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Endless Posts Navigation versions = 2.2.7...

7.1CVSS6.2AI score0.00257EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/10/18 12:0 a.m.7 views

WordPress Endless Posts Navigation Plugin <= 2.2.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software Endless Posts Navigation Type Plugin Vulnerable versions = 2.2.7 Fixed in 2.2.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49629 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6c607ad01f6a Credits...

7.1CVSS6.9AI score0.00257EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder