Advisories · Technology
gwin WPAdverts – Classifieds Plugin.
Every CVE that names gwin WPAdverts – Classifieds Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
WPAdverts <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting via 'adverts_location' Parameter
- gwin WPAdverts – Classifieds Plugin
- Cross-site scripting (XSS)
- CVSS 7.5 High
WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint
- gwin WPAdverts – Classifieds Plugin
- Broken access control
- CVSS 6.1 Medium
WPAdverts – Classifieds Plugin <= 2.1.7 - Reflected Cross-Site Scripting
- gwin WPAdverts – Classifieds Plugin
- Cross-site scripting (XSS)
- CVSS 7.2 High
WPAdverts – Classifieds Plugin <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode
- gwin WPAdverts – Classifieds Plugin
- Cross-site scripting (XSS)