Plugin icon

WPAdverts – Classifieds Plugin

wpadverts

Vulnerabilities:

16

Last Updated:

October 7, 2026

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2026-10-09
Title
WPAdverts < 2.3.5 - Unauthenticated Stored Cross-Site Scripting via 'adverts_location' Parameter
Fixed in
Fixed in 2.3.5
CVSS
7.2 (high)
Published
2026-10-08
Title
WPAdverts – Classifieds Plugin < 2.3.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.3.5
CVSS
6.1 (medium)
Published
2026-10-08
Title
WPAdverts – Classifieds Plugin < 2.3.5 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.5
CVSS
7.2 (high)
Published
2026-09-08
Title
WPAdverts – Classifieds Plugin < 2.3.4 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.4
CVSS
7.2 (high)
Published
2026-08-17
Title
WPAdverts < 2.3.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint
Fixed in
Fixed in 2.3.3
CVSS
7.5 (high)
Published
2026-07-01
Title
WPAdverts – Classifieds Plugin < 2.3.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.2
CVSS
7.2 (high)
Published
2026-04-22
Title
WPAdverts – Classifieds Plugin < 2.3.1 - Missing Authorization
Fixed in
Fixed in 2.3.1
CVSS
5.3 (medium)
Published
2026-01-07
Title
WPAdverts – Classifieds Plugin < 2.3.1 - Missing Authorization
Fixed in
Fixed in 2.3.1
CVSS
4.3 (medium)
Published
2025-07-16
Title
WPAdverts < 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.2.6
CVSS
6.4 (medium)
Published
2025-06-12
Title
WPAdverts < 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.2.5
CVSS
6.4 (medium)
Published
2025-05-19
Title
WPAdverts < 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.2.4
CVSS
6.4 (medium)
Published
2025-05-07
Title
WPAdverts < 2.2.3 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 2.2.3
CVSS
8.8 (high)
Published
2025-04-16
Title
WPAdverts < 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.2.2
CVSS
6.4 (medium)
Published
2024-11-20
Title
WPAdverts – Classifieds Plugin < 2.1.8 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.1.8
CVSS
6.1 (medium)
Published
2024-10-29
Title
WPAdverts – Classifieds Plugin < 2.1.7 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode
Fixed in
Fixed in 2.1.7
CVSS
7.2 (high)
Published
2024-06-21
Title
WPAdverts – Classifieds Plugin < 2.1.3 - Cross-Site Request Forgery
Fixed in
Fixed in 2.1.3
CVSS
4.3 (medium)