Approved changes feed: RSS · Atom

cpe:2.3:a:fahad_mahmood:endless_posts_navigation:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFahad Mahmood (c2625ac9-2831-5470-a714-4d6cabe9bc7d)
ProductEndless Posts Navigation (da0018c0-0ec2-5076-9b3b-32b95eba1184)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25332 vulnerable 2026-06-03 15:16:54.428908 WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through <= 2.2.9.
Published: 2026-02-19T08:26:57.298Z
Updated: 2026-04-28T16:14:55.675Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49629 vulnerable 2026-06-03 14:57:12.864282 WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability
HIGH (7.1)
Cross-Site Request Forgery (CSRF) vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through <= 2.2.7.
Published: 2024-10-20T10:05:32.080Z
Updated: 2026-04-28T16:10:26.259Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.