Advisories · Technology

pluginsware Advanced Classifieds & Directory Pro.

Every CVE that names pluginsware Advanced Classifieds & Directory Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93883 CVE record

CVSS 6.4 Medium

Advanced Classifieds & Directory Pro <= 3.4.4 - Authenticated (Custom+) Stored Cross-Site Scripting via 'phone' Parameter
- pluginsware Advanced Classifieds & Directory Pro
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2026
CVE-2025-68580 CVE record

CVSS 4.3 Medium

WordPress Advanced Classifieds & Directory Pro plugin <= 3.2.9 - Cross Site Request Forgery (CSRF) vulnerability
- pluginsware Advanced Classifieds & Directory Pro
- Cross-site request forgery (CSRF)
Not analysed yet 24 Dec 2025
CVE-2024-37501 CVE record

CVSS 8.5 High

WordPress Advanced Classifieds & Directory Pro plugin <= 3.1.3 - Local File Inclusion vulnerability
- PluginsWare Advanced Classifieds & Directory Pro
- Path traversal
Not analysed yet 9 Jul 2024
CVE-2024-2222 CVE record

CVSS 4.3 Medium

Advanced Classifieds & Directory Pro <= 3.0.0 - Missing Authorization to Arbitrary Attachment Deletion
- pluginsware Advanced Classifieds & Directory Pro
- Broken access control
Not analysed yet 9 Apr 2024