WPAdverts – Classifieds Plugin

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WPAdverts – Classifieds Plugin

Information

Software Type Plugin
Software Slug wpadverts (view on wordpress.org)
Software Status Active
Software Author gwin
Software Website wpadverts.com
Software Downloads 500,589
Software Active Installs 4,000
Software Record Last Updated July 22, 2026

11 Vulnerabilities

Submit a Vulnerability
WPAdverts – Classifieds Plugin <= 2.3.1 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-57366
Jul 1, 2026
Researcher: Evan NR
WPAdverts – Classifieds Plugin <= 2.3.0 - Missing Authorization
5.3
CVE-2026-40782
Apr 22, 2026
Researcher: TheNetRunner Security Research
WPAdverts – Classifieds Plugin <= 2.3.0 - Missing Authorization
4.3
CVE-2026-27092
Jan 7, 2026
Researcher: theviper17
WPAdverts <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-54024
Jul 16, 2025
Researcher: zaim
WPAdverts <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-49878
Jun 12, 2025
Researcher: zaim
WPAdverts <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-48269
May 19, 2025
Researcher: zaim
WPAdverts <= 2.2.2 - Authenticated (Contributor+) Local File Inclusion
8.8
CVE-2025-47440
May 7, 2025
Researcher: zaim
WPAdverts <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-39576
Apr 16, 2025
Researcher: Muhammad Yudha - DJ
WPAdverts – Classifieds Plugin <= 2.1.7 - Reflected Cross-Site Scripting
6.1
CVE-2024-10890
Nov 20, 2024
Researcher: Peter Thaleikis
WPAdverts – Classifieds Plugin <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode
7.2
CVE-2024-10108
Oct 29, 2024
Researcher: Arkadiusz Hydzik
WPAdverts – Classifieds Plugin <= 2.1.2 - Cross-Site Request Forgery
4.3
CVE-2024-37238
Jun 21, 2024
Researcher: Majed Refaea
Title Status CVE ID CVSS Researchers Date
WPAdverts – Classifieds Plugin <= 2.3.1 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-57366 7.2 Evan NR July 1, 2026
WPAdverts – Classifieds Plugin <= 2.3.0 - Missing Authorization Patched CVE-2026-40782 5.3 TheNetRunner Security Research April 22, 2026
WPAdverts – Classifieds Plugin <= 2.3.0 - Missing Authorization Patched CVE-2026-27092 4.3 theviper17 January 7, 2026
WPAdverts <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-54024 6.4 zaim July 16, 2025
WPAdverts <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-49878 6.4 zaim June 12, 2025
WPAdverts <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-48269 6.4 zaim May 19, 2025
WPAdverts <= 2.2.2 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2025-47440 8.8 zaim May 7, 2025
WPAdverts <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-39576 6.4 Muhammad Yudha - DJ April 16, 2025
WPAdverts – Classifieds Plugin <= 2.1.7 - Reflected Cross-Site Scripting Patched CVE-2024-10890 6.1 Peter Thaleikis November 20, 2024
WPAdverts – Classifieds Plugin <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode Patched CVE-2024-10108 7.2 Arkadiusz Hydzik October 29, 2024
WPAdverts – Classifieds Plugin <= 2.1.2 - Cross-Site Request Forgery Patched CVE-2024-37238 4.3 Majed Refaea June 21, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation