plugin

Breadcrumb Navxt Vulnerabilities

5 known security issues reported for the Breadcrumb Navxt WordPress plugin. Most recent disclosed Sep 2, 2026.

1 high 3 medium

Running Breadcrumb Navxt on your site? Check whether your installed version is affected.

Scan your site free

Breadcrumb NavXT <= 7.5.1 - Unauthenticated Stored Cross-Site Scripting

high

The Breadcrumb NavXT plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.5.1. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever...

CVSS:
7.2
(Wordfence)
Affected:
up to 7.5.1
Fixed in:
7.5.2
Disclosed:
Sep 2, 2026

CVE-2026-84765 on NVD →

Breadcrumb NavXT <= 7.5.0 - Missing Authorization to Sensitive Information Exposure

medium

The Breadcrumb NavXT plugin for WordPress is vulnerable to authorization bypass through user-controlled key in versions up to and including 7.5.0. This is due to the Gutenberg block renderer trusting the $_REQUEST['post_id'] parameter without verification in the includes/blocks/build/breadcrumb-trail/render.php file. T...

CVSS:
5.3
(Wordfence)
Affected:
up to 7.5.0
Fixed in:
7.5.1
Disclosed:
Feb 18, 2026

CVE-2025-13842 on NVD →

Breadcrumb NavXT < 7.5.1 - Sensitive Information Exposure

medium
Affected:
up to 7.5.1
Fixed in:
7.5.1
Disclosed:
Feb 18, 2026

CVE-2025-13842 on NVD →

Breadcrumb NavXT < 6.2.0 - Username Disclosure via REST API

unknown
Affected:
up to 6.2.0
Fixed in:
6.2.0
Disclosed:
Sep 28, 2018

Breadcrumb NavXT <= 6.1.0 - Sensitive Data Exposure

medium

The Breadcrumb NavXT plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including 6.1.0. This can allow unauthorized attackers to extract sensitive data including sensitive information that may help in launching further attacks, such as username disclosure.

CVSS:
5.3
(Wordfence)
Affected:
up to 6.1.0
Fixed in:
6.2.0
Disclosed:
Sep 26, 2018

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database