Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2026/02/20 1:27 p.m.1 views

CVE-2026-25332

Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through = 2.2.9...

5.3CVSS5.5AI score0.00014EPSS
Exploits0References1
NVD
NVD
added 2026/02/19 9:16 a.m.2 views

CVE-2026-25332

Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through = 2.2.9...

5.3CVSS0.00014EPSS
Exploits0References1
CVE
CVE
added 2026/02/19 8:26 a.m.6 views

CVE-2026-25332

CVE-2026-25332 affects the WordPress Endless Posts Navigation plugin (versions up to 2.2.9). The issue is Missing Authorization / Broken Access Control due to incorrectly configured access control, enabling exploitation without privileges. The connected documents do not specify a concrete fix ver...

5.3CVSS5.4AI score0.00014EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/19 8:26 a.m.23 views

CVE-2026-25332 WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through = 2.2.9...

5.3CVSS0.00014EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:26 a.m.2 views

CVE-2026-25332

Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through = 2.2.9...

5.5AI score0.00014EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/19 8:26 a.m.2 views

CVE-2026-25332 WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through = 2.2.9...

5.3CVSS5.5AI score0.00014EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.3 views

WordPress plugin Endless Posts Navigation 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.3CVSS5.8AI score0.00014EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.2 views

PT-2026-20700

Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through = 2.2.9...

5.5AI score0.00014EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/07 7:28 a.m.2 views

WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Endless Posts Navigation versions = 2.2.9...

5.3CVSS5.4AI score0.00014EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/11/04 4:52 a.m.5 views

WordPress Posts Navigation Links for Sections and Headings plugin <= 1.0.1 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by dayea song - Ahnlab in WordPress Plugin Posts Navigation Links for Sections and Headings versions = 1.0.1...

4.3CVSS7AI score0.00014EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/11/04 4:27 a.m.7 views

CVE-2025-12188 Posts Navigation Links for Sections and Headings - Free by WP Masters <= 1.0.1 - Cross-Site Request Forgery to Settings Update

The Posts Navigation Links for Sections and Headings – Free by WP Masters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'wpmnavigationlinkssettings' page. This makes it...

4.3CVSS0.00014EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/04 12:0 a.m.1 views

WordPress plugin Posts Navigation Links for Sections and Headings Free by WP Masters 跨站请求伪造漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

4.3CVSS5.7AI score0.00014EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/04 12:0 a.m.3 views

PT-2025-44946

The Posts Navigation Links for Sections and Headings – Free by WP Masters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the 'wpm navigation links settings' page. This makes it...

4.3CVSS5.3AI score0.00014EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-43492

Malicious code in bioql PyPI...

7.1CVSS6.5AI score0.00257EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 5:52 a.m.2 views

CVE-2024-49629

Cross-Site Request Forgery CSRF vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through = 2.2.7...

7.1CVSS5.9AI score0.00257EPSS
Exploits0References1
NVD
NVD
added 2024/10/20 10:15 a.m.13 views

CVE-2024-49629

Cross-Site Request Forgery CSRF vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through = 2.2.7...

7.1CVSS0.00257EPSS
Exploits0References1
OSV
OSV
added 2024/10/20 10:15 a.m.0 views

CVE-2024-49629

Cross-Site Request Forgery CSRF vulnerability in Fahad Mahmood Endless Posts Navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through 2.2.7...

6.1CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/20 10:5 a.m.9 views

CVE-2024-49629 WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Fahad Mahmood Endless Posts Navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through 2.2.7...

7.1CVSS6.8AI score0.00257EPSS
Exploits0References1
CVE
CVE
added 2024/10/20 10:5 a.m.42 views

CVE-2024-49629

CVE-2024-49629 concerns the WordPress plugin Endless Posts Navigation (versions

7.1CVSS5.9AI score0.00257EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/20 10:5 a.m.17 views

CVE-2024-49629 WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through = 2.2.7...

7.1CVSS0.00257EPSS
Exploits0References1
Rows per page
Query Builder