CVE-2026-59550

CriticalCVSS 9.3

Published: 27/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

The AWP Classifieds plugin for WordPress version 4.4.7 and earlier contains an unauthenticated SQL injection vulnerability.

An unauthenticated attacker can execute arbitrary SQL queries, potentially leading to data leakage, database modification, or site compromise.

Immediately update the AWP Classifieds plugin to the latest version that includes a fix.

Original NVD description (English source)

Unauthenticated SQL Injection in AWP Classifieds <= 4.4.7 versions.