CVE-2026-96904
AWP Classifieds < 4.4.9 - Unauthenticated Listing Contact Email Disclosure via Place Ad Page
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing unauthenticated attackers to bypass the ownership check on the ad submission page and read the private contact email stored on any listing.
| Vendor | unknown |
| Product | awp classifieds |
| Published | Oct 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown awp classifieds
Be the first to know when new unknown vulnerabilities affecting unknown awp classifieds are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / AWP Classifieds
0 < 4.4.9
References
Credits
Usama Arshad WPScan