Pluginsware - vulnerabilities (CVEs)

6 CVEs in 3 products, 1 in the last 30 days, newest from 2026-10-10.

Products

CVE-2026-93883 - CVSS 6.4 (medium), 2026-10-10: The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone' parameter in all versions up to,…
CVE-2024-13362 - CVSS 6.1 (medium), 2026-05-01: Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient…
CVE-2025-68580 - CVSS 4.3 (medium), 2025-12-24: Cross-Site Request Forgery (CSRF) vulnerability in pluginsware Advanced Classifieds & Directory Pro advanced-classifieds-and-directory-pro allows Cross Site…
CVE-2022-4974 - CVSS 6.3 (medium), 2024-10-16: The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to…
CVE-2024-37501 - CVSS 8.5 (high), 2024-07-09: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PluginsWare Advanced Classifieds & Directory Pro allows Path…
CVE-2024-2222 - CVSS 4.3 (medium), 2024-04-09: The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the…