gwin vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20262

Newest CVEs

• CVE-2026-100178

  WPAdverts <= 2.3.4 - Unauthenticated Stored Cross-Site Scripting via 'adverts_location' Parameter

  gwin · WPAdverts – Classifieds Plugin

  High7.2
• CVE-2026-11801

  WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint

  gwin · WPAdverts – Classifieds Plugin

  High7.5
• CVE-2024-10890

  WPAdverts – Classifieds Plugin <= 2.1.7 - Reflected Cross-Site Scripting

  gwin · WPAdverts – Classifieds Plugin

  Medium6.1
• CVE-2024-10108

  WPAdverts – Classifieds Plugin <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode

  gwin · WPAdverts – Classifieds Plugin

  High7.2