Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

pluginsware vulnerabilities

6 published CVEs name pluginsware among the affected products.

Published CVEs
6
Last 12 months
3
Critical
0
Known exploited
0

Critical 0High 1Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20243
  2. 20251
  3. 20262

Newest CVEs

  • CVE-2026-93883

    Advanced Classifieds & Directory Pro <= 3.4.4 - Authenticated (Custom+) Stored Cross-Site Scripting via 'phone' Parameter

    pluginsware · Advanced Classifieds & Directory Pro

    Medium6.4
  • CVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    sebet · Go Fetch Jobs (for WP Job Manager)

    Medium6.1
  • CVE-2025-68580

    WordPress Advanced Classifieds & Directory Pro plugin <= 3.2.9 - Cross Site Request Forgery (CSRF) vulnerability

    pluginsware · Advanced Classifieds & Directory Pro

    Medium4.3
  • CVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

    Medium6.3
  • CVE-2024-37501

    WordPress Advanced Classifieds & Directory Pro plugin <= 3.1.3 - Local File Inclusion vulnerability

    PluginsWare · Advanced Classifieds & Directory Pro

    High8.5
  • CVE-2024-2222

    Advanced Classifieds & Directory Pro <= 3.0.0 - Missing Authorization to Arbitrary Attachment Deletion

    pluginsware · Advanced Classifieds & Directory Pro

    Medium4.3