111 matches found
CVE-2026-59550
CVE-2026-59550 - AWP Classifieds ≤ 4.4.7 unauthenticated SQL injection Unauthenticated time-based blind SQL injection in the WordPress plugin AWP Classifieds another-wordpress-classifieds-plugin, reachable through the plugin's anonymous guest AJAX ad-submission flow. | ---|--- CVE| CVE-2026-59550...
CVE-2025-15700
The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly...
CVE-2025-15700 AWP Classifieds < 4.4.9 - Admin+ Arbitrary File Upload via ZIP Import
The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly...
CVE-2025-15700
The AWP Classifieds WordPress plugin, in versions before 4.4.9 , contains an arbitrary file upload vulnerability. The issue stems from a failure to validate the file types extracted from a ZIP archive during the listing-import feature. An attacker with management capabilities can exploit this to ...
EUVD-2025-211055
The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with the AWP Classifieds WordPress plugin before 4.4.9's management capability to upload arbitrary PHP files to a publicly...
WordPress AWP Classifieds plugin < 4.4.9 - Admin+ Arbitrary File Upload vulnerability
Admin+ Arbitrary File Upload vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin AWP Classifieds versions 4.4.9...
Exploit for CVE-2026-59550
CVE-2026-59550 - AWP Classifieds ≤ 4.4.7 unauthenticated SQL i...
CVE-2026-59550
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
CVE-2026-59550 WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
CVE-2026-59550
CVE-2026-59550 affects the WordPress plugin AWP Classifieds (versions
EUVD-2026-49219
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
CVE-2026-59550
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
CVE-2026-59550: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
PT-2026-64938
Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...
WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Thaer Assfour in WordPress Plugin AWP Classifieds versions = 4.4.7...
CVE-2026-65469
Unauthenticated Broken Access Control in AWP Classifieds = 4.4.7 versions...
CVE-2026-65469 WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in AWP Classifieds = 4.4.7 versions...
CVE-2026-65469 WordPress AWP Classifieds plugin <= 4.4.7 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in AWP Classifieds = 4.4.7 versions...