CVE-2026-19074

MediumCVSS 5.3

Published: 10/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

The Advanced Classifieds & Directory Pro plugin before version 3.4.3 (<= 3.4.2) is vulnerable to unauthenticated sensitive information exposure via the AJAX action `acadp_public_custom_fields_listings`.

Risk Assessment

An attacker without authentication can access sensitive data, compromising information confidentiality.

Recommendation

Update the plugin to version 3.4.3 or later.

Other vulnerabilities in Advanced Classifieds & Directory Pro

CVE-2025-68580Medium
CSRF vulnerability in Advanced Classifieds & Directory Pro up to version 3.2.9. Allows an attacker to perform unauthorized actions in the context of a logged-in user.

Original NVD description (English source)

The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) is vulnerable to unauthenticated sensitive information exposure via the AJAX action `acadp_public_custom_fields_listings`.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS