Endless Posts Navigation

Endless Posts Navigation has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Endless Posts Navigation has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Endless Posts Navigation is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
4.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Endless Posts Navigation vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-25332

Endless Posts Navigation <= 2.2.9 - Missing Authorization

Read the full analysis

Vulnerability Records

2 records
Endless Posts Navigation banner
Latestv2.3.0

Endless Posts Navigation

Fahad Mahmood

Author

Fahad Mahmood

5.0(3)
100/100
Last Updated
2026-02-05 (7mo ago)
Active Installs
100+
Downloads
11,138
Requires WP
3.0+
Requires PHP
7.0+
Tested up to
WP 6.9.7
Created
2013-12-10 (13y ago)

It automatically detects the post type where it is implemented and provide the endless navigation from the same taxonomy/category. You don’t need to worry about its order. It automatically manages alphabetical order for next and previous navigation. Author: Fahad Mahmood Project URI: http://androidbubble.com/blog/wordpress/plugins/endless-posts-navigation License: GPL 3. See License below for copyright jots and tittles. Detailed description. Important! Visit my blog and suggest good features which you want to see in this plugin. Tags pagination, filtering, alphabet sequence, sorting next previous posts, sorting pages Video Tutorials: Endless Post Navigation – Normal: Endless Post Navigation – Leakage: License This WordPress Plugin is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or any later version. This free software is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this software. If not, see http://www.gnu.org/licenses/gpl-2.0.html.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C