Lucene search
+L

38 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•2 views

CVE-2025-68580: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in pluginsware Advanced Classifieds & Directory Pro advanced-classifieds-and-directory-pro allows Cross Site Request Forgery.This issue affects Advanced Classifieds & Directory Pro: from n/a through = 3.2.9...

4.3CVSS5.8AI score0.00131EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2006-3594

Malware in sbrugna...

7.5CVSS6.4AI score0.01114EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-36713

Malicious code in bioql PyPI...

8.5CVSS6.5AI score0.00513EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:37 a.m.•13 views

CVE-2024-37501

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in PluginsWare Advanced Classifieds & Directory Pro allows Path Traversal.This issue affects Advanced Classifieds & Directory Pro: from n/a through 3.1.3...

8.5CVSS6.8AI score0.00513EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/09 12:15 p.m.•26 views

CVE-2024-37501

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in PluginsWare Advanced Classifieds & Directory Pro allows Path Traversal.This issue affects Advanced Classifieds & Directory Pro: from n/a through 3.1.3...

8.5CVSS0.00513EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/09 11:57 a.m.•58 views

CVE-2024-37501

The CVE-2024-37501 entry concerns PluginsWare Advanced Classifieds & Directory Pro with an authenticated Local File Inclusion (LFI) vulnerability. Affected versions are up to 3.1.3 (reported as n/a through 3.1.3). The root cause is an improper pathname limitation that permits traversal to restric...

8.5CVSS8.4AI score0.00513EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/09 11:57 a.m.•18 views

CVE-2024-37501 WordPress Advanced Classifieds & Directory Pro plugin <= 3.1.3 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in PluginsWare Advanced Classifieds & Directory Pro allows Path Traversal.This issue affects Advanced Classifieds & Directory Pro: from n/a through 3.1.3...

8.5CVSS6.8AI score0.00513EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/09 12:00 a.m.•10 views

WordPress plugin Advanced Classifieds & Directory Pro path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

8.5CVSS6.8AI score0.00513EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•2 views

CVE-2024-37501: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in PluginsWare Advanced Classifieds & Directory Pro allows Path Traversal.This issue affects Advanced Classifieds & Directory Pro: from n/a through 3.1.3...

8.5CVSS5.8AI score0.00513EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/07/04 1:46 p.m.•12 views

WordPress Advanced Classifieds & Directory Pro plugin <= 3.1.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Advanced Classifieds & Directory Pro versions = 3.1.3...

8.5CVSS7AI score0.00513EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/07/04 12:00 a.m.•20 views

WordPress Advanced Classifieds & Directory Pro Plugin <= 3.1.3 is vulnerable to Local File Inclusion

Software Advanced Classifieds & Directory Pro Type Plugin Vulnerable versions = 3.1.3 Fixed in 3.2.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-37501 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 09c35e44898b Credits João Pedro S Alcântar...

8.5CVSS6.9AI score0.00513EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2024/04/09 12:00 a.m.•14 views

WordPress Plugin Advanced Classifieds & Directory Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS7.9AI score0.00539EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/04/09 12:00 a.m.•3 views

PT-2024-19284

Name of the Vulnerable Software and Affected Versions Advanced Classifieds & Directory Pro plugin for WordPress versions up to, and including, 3.0.0 Description The issue is related to unauthorized loss of data due to a missing capability check on the ajax callback delete attachment function. Thi...

4.3CVSS6AI score0.00539EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/09 12:00 a.m.•1 views

CVE-2024-2222: Missing Authorization

The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ajaxcallbackdeleteattachment function in all versions up to, and including, 3.0.0. This makes it possible for authenticated attackers, with subscriber...

4.3CVSS5.8AI score0.00539EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•15 views

WordPress Advanced Classifieds & Directory Pro Plugin < 2.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Classifieds & Directory Pro Type Plugin Vulnerable versions 2.1.2 Fixed in 2.1.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b009c6df7451 Credits Rafie Muhamma...

6.8AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•19 views

WordPress Advanced Classifieds & Directory Pro plugin < 1.8.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Advanced Classifieds & Directory Pro plugin versions 1.8.8. Solution Update the WordPress Advanced Classifieds & Directory Pro plugin to the latest available version at least 1.8.8...

3.9AI score
SaveExploits0References2Affected Software1
NVD
NVD
•added 2006/07/18 3:37 p.m.•26 views

CVE-2006-3599

SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idads parameter in an EditAds op...

7.5CVSS8.4AI score0.01114EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/07/14 12:00 a.m.•6 views

CVE-2006-3599: Undefined Security Weakness

SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idads parameter in an EditAds op...

7.5CVSS6.4AI score0.01114EPSS
SaveExploits0References1
Rows per page
Query Builder