Next Page, Not Next Post
Next Page, Not Next Post has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Next Page, Not Next Post has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Muhammad Yudha - DJ. Next Page, Not Next Post is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.0.38.
CVE-2025-62943Next Page, Not Next Post <= 0.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Next Page, Not Next Post
Author
Matt McInvale
Next Page, Not Next Post is a very simple plugin that creates navigation between sibling pages. This plugin gives you two new functions, next_page_not_post($anchor_text, $loop, $sort) & previous_page_not_post($anchor_text, $loop, $sort). Each function has three simple options. Anchor Text – Either set the anchor text manually or use the page title. Use %title to use page title with other strings. Defaults to page title, just leave blank for that. Looping – Link the first element to the last and the last to the first, or not. Defaults to not looping. Set to true for looping, cousins for cousin based navigation and cousinsloop for cousins navigation that loops. Get Pages – This is used to determine how to sort your results. Use the documentation at Get Pages to find all available options here. Defaults to menu_order ascending. SHORTCODES You can use [next_page] and [previous_page] shortcodes within your page content. Supported options are ‘anchor’, ‘loop’ and ‘getPagesQuery’. More documentation for Next Page, Not Next Post on BinaryM.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C