CVE-2026-96904

5.3 Moyenne

Publiée le 14/10/2026 à 09:17 · Modifiée le 14/10/2026 à 18:14 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing unauthenticated attackers to bypass the ownership check on the ad submission page and read the private contact email stored on any listing.

Traduire en français

Produits concernés

Unknown AWP Classifieds

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-200

Références

https://wpscan.com/vulnerability/b3df7272-9b79-4a3c-b230-6c3e97c4bbe5/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories