Lucene search
+L

1490 matches found

CVE
CVE
added 2026/05/27 9:49 a.m.24 views

CVE-2026-42726

CVE-2026-42726 describes a Missing Authorization / Broken Access Control in the WordPress plugin AWP Classifieds (versions

6.5CVSS5.8AI score0.00242EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 9:49 a.m.11 views

CVE-2026-42726 WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through = 4.4.5...

6.5CVSS5.8AI score0.00242EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/27 9:49 a.m.39 views

CVE-2026-42726 WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through = 4.4.5...

6.5CVSS0.00242EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/27 9:49 a.m.17 views

EUVD-2026-32178

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through = 4.4.5...

6.5CVSS5.8AI score0.00242EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/27 9:49 a.m.10 views

CVE-2026-42726

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through = 4.4.5...

6.5CVSS5.8AI score0.00242EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.17 views

PT-2026-43638

Missing Authorization vulnerability in Strategy11 Team AWP Classifieds another-wordpress-classifieds-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AWP Classifieds: from n/a through = 4.4.5...

6.5CVSS5.8AI score0.00242EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.16 views

WordPress plugin AWP Classifieds 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.00242EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/05/12 3:10 p.m.17 views

WordPress AWP Classifieds plugin <= 4.4.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by she11f in WordPress Plugin AWP Classifieds versions = 4.4.5...

6.5CVSS5.8AI score0.00242EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/05/05 3:17 p.m.13 views

WordPress AWP Classifieds plugin < 4.4.6.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Hunter Jensen skid in WordPress Plugin AWP Classifieds versions 4.4.6.1...

7.5CVSS5.9AI score0.00413EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/05 2:26 a.m.42 views

CVE-2026-5100 AWP Classifieds <= 4.4.5 - Unauthenticated SQL Injection via 'regions'

The AWP Classifieds plugin for WordPress is vulnerable to SQL Injection via the 'regions' parameter array keys in versions up to, and including, 4.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

7.5CVSS0.00413EPSS
SaveExploits0References19
CVE
CVE
added 2026/05/05 2:26 a.m.21 views

CVE-2026-5100

The CVE-2026-5100 entry concerns the WordPress AWP Classifieds plugin up to v4.4.5, vulnerable to SQL Injection via the regions parameter array keys due to insufficient escaping and lack of prepared statements. The issue allows unauthenticated attackers to append additional SQL to existing querie...

7.5CVSS5.9AI score0.00413EPSS
SaveExploits0References19
Vulnrichment
Vulnrichment
added 2026/05/05 2:26 a.m.9 views

CVE-2026-5100 AWP Classifieds <= 4.4.5 - Unauthenticated SQL Injection via 'regions'

The AWP Classifieds plugin for WordPress is vulnerable to SQL Injection via the 'regions' parameter array keys in versions up to, and including, 4.4.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

7.5CVSS5.9AI score0.00413EPSS
SaveExploits0References19
CNNVD
CNNVD
added 2026/05/05 12:0 a.m.12 views

WordPress plugin AWP Classifieds SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.5CVSS5.9AI score0.00413EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/05 12:0 a.m.12 views

PT-2026-36953

Name of the Vulnerable Software and Affected Versions AWP Classifieds versions prior to 4.4.6 Description Insufficient escaping of user-supplied parameters and lack of proper preparation in SQL queries allow unauthenticated attackers to append additional SQL queries. This issue occurs via the...

7.5CVSS5.9AI score0.00413EPSS
SaveExploits0References25
Patchstack
Patchstack
added 2026/05/01 9:33 a.m.12 views

WordPress Advanced Classifieds & Directory Pro plugin <= 3.2.4 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Advanced Classifieds & Directory Pro versions = 3.2.4...

6.1CVSS5.8AI score0.00276EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2026/05/01 12:0 a.m.19 views

WordPress多款产品 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

6.1CVSS5.7AI score0.00276EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/20 12:0 a.m.7 views

PT-2026-33765

https://t.co/4bpvciSJjS CVE-2026-39533 WordPress plugin vulnerability another-wordpress-classifieds-plugin cybersecurity wordpressfirewall wordpresssecurity hack…...

7.5CVSS5.7AI score0.00304EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/04/14 2:54 a.m.39 views

AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection

WordPress Classifieds Plugin before 4.3 contains a SQL injection caused by improper sanitization and escaping of parameters in an AJAX action, letting unauthenticated attackers execute arbitrary SQL commands, exploit requires the premium module to be active. id: CVE-2022-3254 info: name: AWP...

9.8CVSS7.5AI score0.05103EPSS
SaveExploits2References2
Patchstack
Patchstack
added 2026/04/08 12:29 p.m.9 views

WordPress AWP Classifieds plugin <= 4.4.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dahmani ToumipegaSUS in WordPress Plugin AWP Classifieds versions = 4.4.4...

5.8AI score0.00304EPSS
SaveExploits0Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2026/04/01 12:0 a.m.12 views

VulnCheck KEV: CVE-2022-3254

The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users and when a specific premium module is active, leading to a SQL injection...

9.8CVSS5.9AI score0.05103EPSS
SaveIn wildExploits2References2
Rows per page
Query Builder