AWP Classifieds

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   AWP Classifieds

Information

Software Type Plugin
Software Slug another-wordpress-classifieds-plugin (view on wordpress.org)
Software Status Active
Software Author strategy11team
Software Website awpcp.com
Software Downloads 785,190
Software Active Installs 3,000
Software Record Last Updated July 21, 2026

13 Vulnerabilities

Submit a Vulnerability
AWP Classifieds <= 4.4.5 - Missing Authorization
5.3
CVE-2026-42726
May 12, 2026
Researcher: she11f
AWP Classifieds <= 4.4.6 - Unauthenticated SQL Injection via 'regions'
7.5
CVE-2026-5100
May 4, 2026
Researcher: Hunter Jensen (skid)
AWP Classifieds <= 4.4.4 - Missing Authorization
7.5
CVE-2026-39533
Apr 8, 2026
Researcher: Dahmani Toumi (pegaSUS)
AWP Classifieds <= 4.4.3 - Unauthenticated Information Exposure
5.3
CVE-2026-24593
Jan 16, 2026
Researcher: Phat RiO
AWP Classifieds <= 4.4.3 - Unauthenticated Arbitrary Shortcode Execution
6.5
CVE-2025-57928
Sep 22, 2025
Researcher: Kishan Vyas
AWP Classifieds <= 4.3.1 - Cross-Site Request Forgery
4.3
CVE-2024-32447
Apr 12, 2024
Researcher: Peng Zhou
AWP Classifieds <= 4.3.1 - Missing Authorization
4.3
CVE-2024-31350
Apr 5, 2024
Researcher: Abdi Pranata
AWP Classifieds <= 4.3 - Cross-Site Request Forgery
4.3
CVE-2023-41801
Sep 5, 2023
Researcher: Kévin Mosbahi (Mika)
AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection
9.8
CVE-2022-3254
Oct 10, 2022
Researcher: cydave
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds <= 3.3.1 - Cross-Site Scripting
6.1
CVE ID Unknown
Dec 9, 2014
Researcher: Kacper Szurek
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 3.0 - SQL Injection
6.3
CVE-2014-10013
Nov 10, 2014
Researcher: dill
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 3.0 - Cross-Site Scripting
6.1
CVE-2014-10012
Nov 8, 2014
Researcher: dill
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 2.0 - Arbitrary File Upload
7.2
CVE-2012-4874
Apr 3, 2012
Researchers:
Title Status CVE ID CVSS Researchers Date
AWP Classifieds <= 4.4.5 - Missing Authorization Patched CVE-2026-42726 5.3 she11f May 12, 2026
AWP Classifieds <= 4.4.6 - Unauthenticated SQL Injection via 'regions' Patched CVE-2026-5100 7.5 Hunter Jensen (skid) May 4, 2026
AWP Classifieds <= 4.4.4 - Missing Authorization Patched CVE-2026-39533 7.5 Dahmani Toumi (pegaSUS) April 8, 2026
AWP Classifieds <= 4.4.3 - Unauthenticated Information Exposure Patched CVE-2026-24593 5.3 Phat RiO January 16, 2026
AWP Classifieds <= 4.4.3 - Unauthenticated Arbitrary Shortcode Execution Patched CVE-2025-57928 6.5 Kishan Vyas September 22, 2025
AWP Classifieds <= 4.3.1 - Cross-Site Request Forgery Patched CVE-2024-32447 4.3 Peng Zhou April 12, 2024
AWP Classifieds <= 4.3.1 - Missing Authorization Patched CVE-2024-31350 4.3 Abdi Pranata April 5, 2024
AWP Classifieds <= 4.3 - Cross-Site Request Forgery Patched CVE-2023-41801 4.3 Kévin Mosbahi (Mika) September 5, 2023
AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection Patched CVE-2022-3254 9.8 cydave October 10, 2022
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds <= 3.3.1 - Cross-Site Scripting Patched 6.1 Kacper Szurek December 9, 2014
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 3.0 - SQL Injection Patched CVE-2014-10013 6.3 dill November 10, 2014
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 3.0 - Cross-Site Scripting Patched CVE-2014-10012 6.1 dill November 8, 2014
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 2.0 - Arbitrary File Upload Patched CVE-2012-4874 7.2 April 3, 2012

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation