Lucene search
K

65 matches found

RedhatCVE
RedhatCVE
added 2 days ago4 views

CVE-2026-42726

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through = 4.4.5...

6.5CVSS5.4AI score0.0005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2 days ago4 views

CVE-2026-5100

The AWP Classifieds plugin for WordPress is vulnerable to SQL Injection via the 'regions' parameter array keys in versions up to, and including, 4.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

7.5CVSS5.7AI score0.00171EPSS
Exploits0References1
NVD
NVD
added 2026/05/27 11:16 a.m.8 views

CVE-2026-42726

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through = 4.4.5...

6.5CVSS0.0005EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 9:49 a.m.4 views

CVE-2026-42726 WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through = 4.4.5...

6.5CVSS5.8AI score0.0005EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/27 9:49 a.m.5 views

CVE-2026-42726

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through = 4.4.5...

6.5CVSS5.8AI score0.0005EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/27 9:49 a.m.5 views

EUVD-2026-32178

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through = 4.4.5...

6.5CVSS5.8AI score0.0005EPSS
Exploits0References1
CVE
CVE
added 2026/05/27 9:49 a.m.10 views

CVE-2026-42726

CVE-2026-42726 describes a Missing Authorization / Broken Access Control in the WordPress plugin AWP Classifieds (versions

6.5CVSS5.8AI score0.0005EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/27 9:49 a.m.23 views

CVE-2026-42726 WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through = 4.4.5...

6.5CVSS0.0005EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.6 views

WordPress plugin AWP Classifieds 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.0005EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/05/12 3:10 p.m.7 views

WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by she11f in WordPress Plugin AWP Classifieds versions = 4.4.5...

6.5CVSS5.8AI score0.0005EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/05/05 3:17 p.m.5 views

WordPress AWP Classifieds plugin < 4.4.6.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Hunter Jensen skid in WordPress Plugin AWP Classifieds versions 4.4.6.1...

7.5CVSS5.9AI score0.00171EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/05 2:26 a.m.26 views

CVE-2026-5100 AWP Classifieds <= 4.4.5 - Unauthenticated SQL Injection via 'regions'

The AWP Classifieds plugin for WordPress is vulnerable to SQL Injection via the 'regions' parameter array keys in versions up to, and including, 4.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

7.5CVSS0.00171EPSS
Exploits0References19
Vulnrichment
Vulnrichment
added 2026/05/05 2:26 a.m.3 views

CVE-2026-5100 AWP Classifieds <= 4.4.5 - Unauthenticated SQL Injection via 'regions'

The AWP Classifieds plugin for WordPress is vulnerable to SQL Injection via the 'regions' parameter array keys in versions up to, and including, 4.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

7.5CVSS5.9AI score0.00171EPSS
Exploits0References19
CVE
CVE
added 2026/05/05 2:26 a.m.4 views

CVE-2026-5100

The CVE-2026-5100 entry concerns the WordPress AWP Classifieds plugin up to v4.4.5, vulnerable to SQL Injection via the regions parameter array keys due to insufficient escaping and lack of prepared statements. The issue allows unauthenticated attackers to append additional SQL to existing querie...

7.5CVSS5.9AI score0.00171EPSS
Exploits0References19
CNNVD
CNNVD
added 2026/05/05 12:0 a.m.5 views

WordPress plugin AWP Classifieds SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.5CVSS5.9AI score0.00171EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/05 12:0 a.m.2 views

PT-2026-36953

Name of the Vulnerable Software and Affected Versions AWP Classifieds versions prior to 4.4.6 Description Insufficient escaping of user-supplied parameters and lack of proper preparation in SQL queries allow unauthenticated attackers to append additional SQL queries. This issue occurs via the...

7.5CVSS5.9AI score0.00171EPSS
Exploits0References25
Nuclei
Nuclei
added 2026/04/14 2:54 a.m.4 views

AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection

WordPress Classifieds Plugin before 4.3 contains a SQL injection caused by improper sanitization and escaping of parameters in an AJAX action, letting unauthenticated attackers execute arbitrary SQL commands, exploit requires the premium module to be active. id: CVE-2022-3254 info: name: AWP...

9.8CVSS7.5AI score0.86579EPSS
Exploits2References2
Patchstack
Patchstack
added 2026/04/08 12:29 p.m.5 views

WordPress AWP Classifieds plugin <= 4.4.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dahmani ToumipegaSUS in WordPress Plugin AWP Classifieds versions = 4.4.4...

5.8AI score
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.3 views

CVE-2026-24593

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Retrieve Embedded Sensitive Data.This issue affects AWP Classifieds: from n/a through = 4.4.3...

5.3CVSS5.4AI score0.00015EPSS
Exploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.2 views

CVE-2026-24593

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Retrieve Embedded Sensitive Data.This issue affects AWP Classifieds: from n/a through = 4.4.3...

5.3CVSS0.00015EPSS
Exploits0References1
Rows per page
Query Builder