Breadcrumb Navxt
Approved changes feed: RSS · Atom
cpe:2.3:a:mtekk:breadcrumb_navxt:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mtekk (77d41626-8c25-5be5-b36a-a0aed0a8239a) |
|---|---|
| Product | Breadcrumb Navxt (270cc061-4c92-515f-9d8f-ddd64e70b3a6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-13842 |
vulnerable | 2026-06-08 07:06:32.808979 |
Breadcrumb NavXT <= 7.5.0 - Missing Authorization to Sensitive Information Exposure
MEDIUM (5.3)
The Breadcrumb NavXT plugin for WordPress is vulnerable to authorization bypass through user-controlled key in versions up to and including 7.5.0. This is due to the Gutenberg block renderer trusting the $_REQUEST['post_id'] parameter without verification in the includes/blocks/build/breadcrumb-trail/render.php file. This makes it possible for unauthenticated attackers to enumerate and view breadcrumb trails for draft or private posts by manipulating the post_id parameter, revealing post titles and hierarchy that should remain hidden.
Published: 2026-02-19T04:36:13.093Z
Updated: 2026-04-08T16:57:10.579Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.