EUVD-2026-41362

Unauthenticated Cross Site Scripting XSS in WPAdverts = 2.3.1 versions...

PT-2026-20770

Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPAdverts: from n/a through = 2.2.11...

CVE-2025-47440

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Greg Winiarski WPAdverts wpadverts allows PHP Local File Inclusion.This issue affects WPAdverts: from n/a through = 2.2.2...

CVE-2025-47440 WordPress WPAdverts <= 2.2.2 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Greg Winiarski WPAdverts allows PHP Local File Inclusion. This issue affects WPAdverts: from n/a through 2.2.2...

CVE-2025-47440

CVE-2025-47440 affects WPAdverts versions up to 2.2.2 and is described as an improper control of filename for include/require in PHP, i.e., a Local File Inclusion in the PHP program. The provided documents indicate a local file inclusion vulnerability with an active product (WPAdverts) and list a...

CVE-2025-39576 WordPress WPAdverts plugin <= 2.2.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affects WPAdverts: from n/a through = 2.2.1...