CVE-2026-61424

CVE-2026-61424 — DJ-Classifieds = 3.11.1 imageupload Task → No Auth → 3-String Filter Bypass Overview Unauthenticated arbitrary file upload in DJ-Classifieds for Joomla. The imageupload task endpoint processes file uploads without authentication and relies on a 3-string blocklist ?php, eval, that...

WordPress Car Seller - Auto Classifieds Script - SQL Injection

The requestlistrequest AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitize, validate or escape the orderid POST parameter before using it in a SQL statement, leading to a SQL injection...

CVE-2026-59550

CVE-2026-59550 - AWP Classifieds ≤ 4.4.7 inyección SQL no autenticada Inyección SQL ciega basada en tiempo no autenticada en el plugin de WordPress AWP Classifieds another-wordpress-classifieds-plugin, accesible a través del flujo anónimo invitado de envío de anuncios por AJAX del plugin...

CVE-2026-11801

The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.3.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to...

CVE-2026-19074

The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 = 3.4.2 is vulnerable to unauthenticated sensitive information exposure via the AJAX action acadppubliccustomfieldslistings...

CVE-2026-19074

The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 = 3.4.2 is vulnerable to unauthenticated sensitive information exposure via the AJAX action acadppubliccustomfieldslistings...

CVE-2026-19074 Advanced Classifieds & Directory Pro < 3.4.3 - Unauthenticated Non-Public Listing Custom Field Disclosure

The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 = 3.4.2 is vulnerable to unauthenticated sensitive information exposure via the AJAX action acadppubliccustomfieldslistings...

EUVD-2026-54998

The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 = 3.4.2 is vulnerable to unauthenticated sensitive information exposure via the AJAX action acadppubliccustomfieldslistings...

CVE-2026-19074

CVE-2026-19074 affects the Advanced Classifieds & Directory Pro WordPress plugin prior to 3.4.3 (

CVE-2026-59550

Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...

CVE-2026-59550

Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...

CVE-2026-59550 WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability

Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...

EUVD-2026-49219

Unauthenticated SQL Injection in AWP Classifieds = 4.4.7 versions...

CVE-2026-59550

CVE-2026-59550 affects the WordPress plugin AWP Classifieds (versions

WordPress AWP Classifieds plugin <= 4.4.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Thaer Assfour in WordPress Plugin AWP Classifieds versions = 4.4.7...

EUVD-2026-48081

Unauthenticated Broken Access Control in AWP Classifieds = 4.4.7 versions...

CVE-2026-65469

CVE-2026-65469 affects the WordPress plugin “AWP Classifieds” up to version 4.4.7. The vulnerability is an unauthenticated Broken Access Control issue in AWP Classifieds

CVE-2026-61424

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE...

CVE-2026-61424

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE...

CVE-2026-61424

CVE-2026-61424 affects the Joomla extension DJ-Classifieds . The connected documents describe an unauthenticated file upload vulnerability that leads to full remote code execution (RCE) . The CVE entry specifies the issue for DJ-Classifieds versions earlier than 3.11.2. This means an attacker cou...