CVE-2026-65469
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
The AWP Classifieds plugin version 4.4.7 and earlier contains a broken access control vulnerability that can be exploited without authentication. An attacker can gain unauthorized access to functions or data.
Risk Assessment
The risk involves potential unauthorized access to sensitive data or administrative functions, which could lead to a breach of confidentiality and system integrity.
Recommendation
It is recommended to immediately update the AWP Classifieds plugin to the latest available version that fixes this vulnerability.
Other vulnerabilities in AWP Classifieds
See all- CVE-2026-59550Critical
The AWP Classifieds plugin for WordPress version 4.4.7 and earlier contains an unauthenticated SQL injection vulnerability.
- CVE-2026-39533High
Unauthenticated Broken Access Control exists in AWP Classifieds <= 4.4.4 versions.
- CVE-2026-42726Medium
The AWP Classifieds plugin for WordPress contains a Missing Authorization vulnerability that allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 4.4.5.
Original NVD description (English source)
Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.7 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS