wp_pagenavi_style vulnerabilities

CVEs whose affected-version data names the wp_pagenavi_style package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109150High· 7.1

2d ago

WP PageNavi Style <= 1.4 - Stored XSS via CSRF

The WP PageNavi Style WordPress plugin through 1.4 does not sanitise and escape some of its settings, and has no CSRF check when they are saved, which could allow attackers to make a logged-in administrator store arbitrary JavaScript via…

▾ TwilightEPSS 0.11%via CVEORG