CVE-2025-68580

MediumCVSS 4.3

Published: 24/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 07/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

2th percentile - higher than 2% of all known CVEs

Summary

CSRF vulnerability in Advanced Classifieds & Directory Pro up to version 3.2.9. Allows an attacker to perform unauthorized actions in the context of a logged-in user.

Risk Assessment

Risk of unauthorized changes to site content or configuration, potentially leading to data integrity compromise.

Recommendation

Update the plugin to the latest version if available and implement CSRF protections.

Other vulnerabilities in Advanced Classifieds & Directory Pro

CVE-2026-19074Medium
The Advanced Classifieds & Directory Pro plugin before version 3.4.3 (<= 3.4.2) is vulnerable to unauthenticated sensitive information exposure via the AJAX action `acadp_public_custom_fields_listings`.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in pluginsware Advanced Classifieds & Directory Pro advanced-classifieds-and-directory-pro allows Cross Site Request Forgery.This issue affects Advanced Classifieds & Directory Pro: from n/a through <= 3.2.9.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS