AWP Classifieds vulnerabilities

The AWP Classifieds plugin for WordPress version 4.4.7 and earlier contains an unauthenticated SQL injection vulnerability.

The AWP Classifieds plugin version 4.4.7 and earlier contains a broken access control vulnerability that can be exploited without authentication. An attacker can gain unauthorized access to functions or data.

Unauthenticated Broken Access Control exists in AWP Classifieds <= 4.4.4 versions.

The AWP Classifieds plugin for WordPress contains a Missing Authorization vulnerability that allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 4.4.5.