CVE-2026-19074

MediumCVSS 5.3

Published: 10/08/2026(UTC)Updated: 11/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

The Advanced Classifieds & Directory Pro plugin before version 3.4.3 (<= 3.4.2) is vulnerable to unauthenticated sensitive information exposure via the AJAX action `acadp_public_custom_fields_listings`.

Risk Assessment

An attacker without authentication can access sensitive data, compromising information confidentiality.

Recommendation

Update the plugin to version 3.4.3 or later.

Original NVD description (English source)

The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) is vulnerable to unauthenticated sensitive information exposure via the AJAX action `acadp_public_custom_fields_listings`.