CVE-2026-65469

MediumCVSS 5.3

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Summary

The AWP Classifieds plugin version 4.4.7 and earlier contains a broken access control vulnerability that can be exploited without authentication. An attacker can gain unauthorized access to functions or data.

Risk Assessment

The risk involves potential unauthorized access to sensitive data or administrative functions, which could lead to a breach of confidentiality and system integrity.

Recommendation

It is recommended to immediately update the AWP Classifieds plugin to the latest available version that fixes this vulnerability.

Other vulnerabilities in AWP Classifieds

See all

CVE-2026-59550Critical
The AWP Classifieds plugin for WordPress version 4.4.7 and earlier contains an unauthenticated SQL injection vulnerability.
CVE-2026-39533High
Unauthenticated Broken Access Control exists in AWP Classifieds <= 4.4.4 versions.

Original NVD description (English source)

Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.