Vulnerabilities and security researches forendless-posts-navigation endless-posts-navigation

Oct 22, 2024

CVE, Research URL: CVE-2024-49629
Home page URL: Security reports for Endless Posts Navigation
Application: Endless Posts Navigation
Date: Oct 20, 2024
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Fahad Mahmood Endless Posts Navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through 2.2.7.
Affected versions: max 2.2.7.
Status: vulnerable

Feb 27, 2026

CVE, Research URL: CVE-2026-25332
Home page URL: Security reports for Endless Posts Navigation
Application: Endless Posts Navigation
Date: Feb 19, 2026
Research Description: Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through <= 2.2.9.
Affected versions: max 2.2.9.
Status: vulnerable