Alphabetic Pagination

Alphabetic Pagination has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 7.6, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Alphabetic Pagination has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by João Pedro Soares de Alcântara. Alphabetic Pagination is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSHigh
7.6/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Alphabetic Pagination vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.1

Alphabetic Pagination <= 3.0.7 - Missing Authorization to Unauthenticated Arbitrary Options Update

Read the full analysis

Vulnerability Records

2 records
Alphabetic Pagination banner
Latestv3.2.5

Alphabetic Pagination

Fahad Mahmood

Author

Fahad Mahmood

4.7(81)
94/100
Last Updated
2026-02-05 (7mo ago)
Active Installs
500+
Downloads
86,145
Requires WP
3.0+
Requires PHP
7.0+
Tested up to
WP 6.9.7
Created
2013-06-02 (14y ago)

Author: Fahad Mahmood Project URI: http://androidbubble.com/blog/wordpress/plugins/alphabetic-pagination WooCommerce Shop Page: http://demo.androidbubble.com/shop WooCommerce Product Category: http://demo.androidbubble.com/product-category/food-items License: GPL 3. See License below for copyright jots and titles. Alphabetic pagination is a great plugin to filter your posts/pages and WooCommerce products with alphabets. It is simple to use and easy to understand for customization. Alphabetic Pagination allows you to enable pagination on pages, posts and categories. By default it works with categories to filter posts inside with the selection from the settings page. You can enable it for other sections as well. Options are availble to select auto/custom implementation, where to display post type/status selection and DOM position. You can activate another amazing plugin Chameleon to apply styles on pagination. Pagination can be enabled for selected pages/posts/taxonomies with additional shortcodes. Custom implementation, shortcodes and permissions are available in advanced version. Templates are avarialble with another WordPress plugin Chameleon to shape your page with different style. You can display pagination on archives, categories, shops, portfolio, or selected post/page/product/category etc. Important! Visit my blog and suggest good features which you wana see in this plugin. Tags listing, posts, pages, navigation, categories,taxonomies, custom, arabic, english, russian, korean, hungarian, greek, wpml, translation, CPT-onomies Basic Features Auto Implementation Display Empty Alphabets (ON/OFF) Alphabets Grouping Hide/Show pagination if only one post available (ON/OFF) Specific DOM & CSS selectors Language selection Styles and Templates (Using WordPress Plugin Chameleon) Custom DOM & CSS selectors Manage settings page with Android App (Google Play Store) Advanced Features Custom Implementation Shortcodes for Pagination Shortcodes for Listing/Results Shortcodes for Users List jQuery/JS based one page listing and pagination Video Tutorials Elementor + Shortcodes Styles License This is a free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or any later version. This plugin is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this plugin. If not, see http://www.gnu.org/licenses/gpl-2.0.html.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C