Threat database

13 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.1%	CVE-2026-97264WPAdverts · Cross-site Scripting High7.1EPSS 0.1%2026-10-10CVE Database V5CVE-2026-97264 CVE-2026-97264 is a reflected cross-site scripting (XSS) vulnerability in the WPAdverts plugin by Greg Winiarski. It affects versions from initial release up to and including 2.3.4. This vulnerability allows an attacker to inject malicious scripts into web pages generated by the plugin, potentially impacting confidentiality, integrity, and availability. The CVSS score is 7.1, indicating a high severity level. EPSS 0.1%Vulnerability Greg Winiarski	CVE Database V5	2026-10-10
High	7.1	EPSS 0.1%	CVE-2026-97263WPAdverts · Cross-site Scripting High7.1EPSS 0.1%2026-10-10CVE Database V5CVE-2026-97263 CVE-2026-97263 is a stored cross-site scripting (XSS) vulnerability in the WPAdverts plugin by Greg Winiarski. It affects versions from the initial release up to 2.3.4. The flaw allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. The vulnerability has a high severity rating with a CVSS score of 7.1. EPSS 0.1%Vulnerability Greg Winiarski	CVE Database V5	2026-10-10
High	7.1	EPSS 0.3%	CVE-2026-84819WPAdverts · Cross-site Scripting High7.1EPSS 0.3%2026-09-10CVE Database V5CVE-2026-84819 Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.3 versions. EPSS 0.3%Vulnerability Greg Winiarski #cwe-79	CVE Database V5	2026-09-10
High	7.1	EPSS 0.3%	CVE-2026-57366WPAdverts · Cross-site Scripting High7.1EPSS 0.3%2026-07-02CVE Database V5CVE-2026-57366 Unauthenticated Cross Site Scripting (XSS) in WPAdverts <= 2.3.1 versions. EPSS 0.3%Vulnerability Greg Winiarski #cwe-79	CVE Database V5	2026-07-02
Medium	6.5	EPSS 0.3%	CVE-2026-40782WPAdverts · Missing Authorization Medium6.5EPSS 0.3%2026-06-15CVE Database V5CVE-2026-40782 Unauthenticated Broken Access Control in WPAdverts <= 2.3.0 versions. EPSS 0.3%Vulnerability Greg Winiarski #cwe-862	CVE Database V5	2026-06-15
Medium	6.5	EPSS 0.4%	CVE-2026-27092WPAdverts · Missing Authorization Medium6.5EPSS 0.4%2026-02-19CVE Database V5CVE-2026-27092 Missing Authorization vulnerability in Greg Winiarski WPAdverts wpadverts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPAdverts: from n/a through <= 2.3.0. EPSS 0.4%Vulnerability Greg Winiarski	CVE Database V5	2026-02-19
Medium	5.3	EPSS 0.3%	CVE-2025-58969Custom Login URL · Missing Authorization Medium5.3EPSS 0.3%2025-09-22CVE Database V5CVE-2025-58969 Missing Authorization vulnerability in Greg Winiarski Custom Login URL custom-login-url allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Custom Login URL: from n/a through <= 1.0.2. EPSS 0.3%Vulnerability Greg Winiarski	CVE Database V5	2025-09-22
Medium	6.5	EPSS 0.2%	CVE-2025-54024WPAdverts · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Greg Winiarski… Medium6.5EPSS 0.2%2025-07-16CVE Database V5CVE-2025-54024 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.This issue affects WPAdverts: from n/a through <= 2.2.5. EPSS 0.2%Vulnerability Greg Winiarski	CVE Database V5	2025-07-16
Medium	6.5	EPSS 0.2%	CVE-2025-49878WPAdverts · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Greg Winiarski… Medium6.5EPSS 0.2%2025-06-17CVE Database V5CVE-2025-49878 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows DOM-Based XSS.This issue affects WPAdverts: from n/a through <= 2.2.4. EPSS 0.2%Vulnerability Greg Winiarski	CVE Database V5	2025-06-17
Medium	6.5	EPSS 0.3%	CVE-2025-39576WPAdverts · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Greg Winiarski… Medium6.5EPSS 0.3%2025-04-16CVE Database V5CVE-2025-39576 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affects WPAdverts: from n/a through <= 2.2.1. EPSS 0.3%Vulnerability Greg Winiarski	CVE Database V5	2025-04-16
Medium	4.3	EPSS 0.2%	CVE-2024-37238WPAdverts · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37238 Cross-Site Request Forgery (CSRF) vulnerability in Greg Winiarski WPAdverts wpadverts allows Cross Site Request Forgery.This issue affects WPAdverts: from n/a through <= 2.1.2. EPSS 0.2%Vulnerability Greg Winiarski	CVE Database V5	2025-01-02

Showing 1–13 of 13 results · 2 duplicate CVE records merged