CVE-2026-59550
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
The AWP Classifieds plugin for WordPress version 4.4.7 and earlier contains an unauthenticated SQL injection vulnerability.
Risk Assessment
An unauthenticated attacker can execute arbitrary SQL queries, potentially leading to data leakage, database modification, or site compromise.
Recommendation
Immediately update the AWP Classifieds plugin to the latest version that includes a fix.
Other vulnerabilities in AWP Classifieds
See all- CVE-2026-65469Medium
The AWP Classifieds plugin version 4.4.7 and earlier contains a broken access control vulnerability that can be exploited without authentication. An attacker can gain unauthorized access to functions or data.
- CVE-2026-39533High
Unauthenticated Broken Access Control exists in AWP Classifieds <= 4.4.4 versions.
Original NVD description (English source)
Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.