gwin WPAdverts – Classifieds Plugin

• CVE-2026-100178 High 7.2 WPAdverts <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting via 'adverts_location' Parameter 0.4%
• CVE-2026-11801 High 7.5 WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint 1.6%
• CVE-2024-10890 Medium 6.1 WPAdverts – Classifieds Plugin <= 2.1.7 - Reflected Cross-Site Scripting 0.6%
• CVE-2024-10108 High 7.2 WPAdverts – Classifieds Plugin <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode 0.4%