gwin
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WPAdverts – Classifieds Plugin | 4 | – | Oct 10, 2026 |
Exploited and recent CVEs
- CVE-2026-100178 WPAdverts <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting via 'adverts_location' Parameter 0.4%
- CVE-2026-11801 WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint 1.6%
- CVE-2024-10890 WPAdverts – Classifieds Plugin <= 2.1.7 - Reflected Cross-Site Scripting 0.6%
- CVE-2024-10108 WPAdverts – Classifieds Plugin <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode 0.4%