Approved changes feed: RSS · Atom

cpe:2.3:a:greg_winiarski:wpadverts:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGreg Winiarski (1b539944-9222-58ae-bda2-1a8868f0aa68)
ProductWpadverts (6de5e62c-5ab0-59ed-9bb1-d81b048dd597)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57366 vulnerable 2026-07-29 01:00:29.674207 WordPress WPAdverts plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versions.
Published: 2026-07-02T11:15:22.825Z
Updated: 2026-07-02T15:53:17.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-40782 vulnerable 2026-07-29 00:49:30.453081 WordPress WPAdverts plugin <= 2.3.0 - Broken Access Control vulnerability
MEDIUM (6.5)
Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions.
Published: 2026-06-15T20:18:22.238Z
Updated: 2026-06-16T01:29:36.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27092 vulnerable 2026-06-08 07:53:21.909278 WordPress WPAdverts plugin <= 2.3.0 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPAdverts: from n/a through <= 2.3.0.
Published: 2026-02-19T08:27:11.805Z
Updated: 2026-04-28T16:15:01.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54024 vulnerable 2026-06-08 07:33:11.006519 WordPress WPAdverts plugin <= 2.2.5 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.This issue affects WPAdverts: from n/a through <= 2.2.5.
Published: 2025-07-16T10:36:45.935Z
Updated: 2026-04-28T16:13:28.973Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49878 vulnerable 2026-06-08 07:29:15.043680 WordPress WPAdverts plugin <= 2.2.4 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.This issue affects WPAdverts: from n/a through <= 2.2.4.
Published: 2025-06-17T15:01:14.088Z
Updated: 2026-05-12T00:23:44.299Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48269 vulnerable 2026-06-08 07:27:15.635877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47440 vulnerable 2026-06-08 07:27:14.389635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39576 vulnerable 2026-06-08 07:23:06.787064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37238 vulnerable 2026-06-08 06:39:46.942352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.